Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-42499 (GCVE-0-2026-42499)
Vulnerability from cvelistv5 – Published: 2026-05-07 19:41 – Updated: 2026-08-25 12:05
VLAI
EPSS
VEX
Title
Quadratic string concatenation in consumePhrase in net/mail
Summary
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-08 16:55 UTC
CWE
Assigner
References
46 references
Impacted products
108 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Go standard library | net/mail |
Affected:
0 , < 1.25.10
(semver)
Affected: 1.26.0-0 , < 1.26.3 (semver) |
guessed | |
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:1.32.13-9.rhaos4.19.git2100f27.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el8 |
||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 |
Unaffected:
1786613805 , < *
(rpm)
cpe:/a:redhat:cert_manager:1.19::el9 |
||
| Red Hat | Logging for Red Hat OpenShift 6.0 |
Unaffected:
1785419067 , < *
(rpm)
cpe:/a:redhat:logging:6.0::el9 |
||
| Red Hat | Logging for Red Hat OpenShift 6.4 |
Unaffected:
1782405469 , < *
(rpm)
cpe:/a:redhat:logging:6.4::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.2 |
Unaffected:
1784748010 , < *
(rpm)
cpe:/a:redhat:logging:6.2::el9 |
||
| Red Hat | Logging Subsystem for Red Hat OpenShift 6.5 |
Unaffected:
1786645248 , < *
(rpm)
cpe:/a:redhat:logging:6.5::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911952 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786912006 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.3 |
Unaffected:
1785177357 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.3::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.6 |
Unaffected:
1784058822 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.6::el9 |
||
| Red Hat | Red Hat Advanced Cluster Security 4.9 |
Unaffected:
1783357116 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1783357140 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
||
| Red Hat | Red Hat Developer Hub 1.10 |
Unaffected:
1783447707 , < *
(rpm)
cpe:/a:redhat:rhdh:1.10::el9 |
||
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1782767215 , < *
(rpm)
cpe:/a:redhat:rhdh:1.9::el9 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.25.10-2.2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.26.3-2.2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Migration Toolkit 1.8 |
Unaffected:
1783953372 , < *
(rpm)
cpe:/a:redhat:rhmt:1.8::el8 |
||
| Red Hat | Red Hat Migration Toolkit for Applications 8.1 |
Unaffected:
1785171639 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_applications:8.1::el9 |
||
| Red Hat | Red Hat Migration Toolkit for Applications 8.2 |
Unaffected:
1784211378 , < *
(rpm)
cpe:/a:redhat:migration_toolkit_applications:8.2::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1783544461 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.19 |
Unaffected:
1786489910 , < *
(rpm)
cpe:/a:redhat:openshift:4.19::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.2 |
Unaffected:
1786494900 , < *
(rpm)
cpe:/a:redhat:openshift:4.20::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1786496647 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1786573075 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782222217 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782223341 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782296193 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1782222607 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782222163 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782223138 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782222394 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1782222451 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782226178 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782224487 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782303211 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1782224541 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782223045 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782222366 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782310747 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1782222038 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.12 |
Unaffected:
1785202723 , < *
(rpm)
cpe:/a:redhat:workload_availability_nhc:0.12::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.13 |
Unaffected:
1785203036 , < *
(rpm)
cpe:/a:redhat:workload_availability_snr:0.13::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.3 |
Unaffected:
1785203474 , < *
(rpm)
cpe:/a:redhat:workload_availability_sbr:0.3::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.7 |
Unaffected:
1785203508 , < *
(rpm)
cpe:/a:redhat:workload_availability_mdr:0.7::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 0.8 |
Unaffected:
1785203079 , < *
(rpm)
cpe:/a:redhat:workload_availability_far:0.8::el9 |
||
| Red Hat | Red Hat OpenShift Workload Availability 5.7 |
Unaffected:
1785202847 , < *
(rpm)
cpe:/a:redhat:workload_availability_nmo:5.7::el9 |
||
| Red Hat | Red Hat Quay 3.1 |
Unaffected:
1783750447 , < *
(rpm)
cpe:/a:redhat:quay:3.10::el8 |
||
| Red Hat | Red Hat Quay 3.12 |
Unaffected:
1783751865 , < *
(rpm)
Unaffected: 1784353904 , < * (rpm) cpe:/a:redhat:quay:3.12::el8 |
||
| Red Hat | Red Hat Quay 3.15 |
Unaffected:
1784351966 , < *
(rpm)
cpe:/a:redhat:quay:3.15::el8 |
||
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1783955846 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
||
| Red Hat | Red Hat Quay 3.9 |
Unaffected:
1784125838 , < *
(rpm)
cpe:/a:redhat:quay:3.9::el8 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
4-1.4.2 , < *
(rpm)
Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2
|
||
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1
|
||
| Red Hat | Cryostat 4 |
cpe:/a:redhat:cryostat:4
|
||
| Red Hat | Custom Metric Autoscaler operator for Red Hat Openshift |
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
|
||
| Red Hat | External Secrets Operator for Red Hat OpenShift |
cpe:/a:redhat:external_secrets_operator:1
|
||
| Red Hat | File Integrity Operator |
cpe:/a:redhat:openshift_file_integrity_operator:1
|
||
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3
|
||
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4
|
||
| Red Hat | Multiarch Tuning Operator |
cpe:/a:redhat:multiarch_tuning_operator
|
||
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine
|
||
| Red Hat | Multicluster Global Hub |
cpe:/a:redhat:multicluster_globalhub
|
||
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1
|
||
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools
|
||
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed
|
||
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1
|
||
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1
|
||
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2
|
||
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3
|
||
| Red Hat | Power monitoring for Red Hat OpenShift |
cpe:/a:redhat:openshift_power_monitoring
|
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2
|
||
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2
|
||
| Red Hat | Red Hat Ceph Storage 5 |
cpe:/a:redhat:ceph_storage:5
|
||
| Red Hat | Red Hat Ceph Storage 6 |
cpe:/a:redhat:ceph_storage:6
|
||
| Red Hat | Red Hat Ceph Storage 9 |
cpe:/a:redhat:ceph_storage:9
|
||
| Red Hat | Red Hat Certification Program for Red Hat Enterprise Linux 9 |
cpe:/a:redhat:certifications:9
|
||
| Red Hat | Red Hat Edge Manager 1 |
cpe:/a:redhat:edge_manager:1
|
||
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10
|
||
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9
|
||
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3
|
||
| Red Hat | Red Hat Lightspeed for Runtimes Operator |
cpe:/a:redhat:lightspeed_for_runtimes:1
|
||
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai
|
||
| Red Hat | Red Hat OpenShift Cluster Manager CLI |
cpe:/a:redhat:openshift_cluster_manager_cli:1
|
||
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4
|
||
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4
|
||
| Red Hat | Red Hat OpenShift Dev Spaces |
cpe:/a:redhat:openshift_devspaces:3
|
||
| Red Hat | Red Hat OpenShift Dev Workspaces Operator |
cpe:/a:redhat:devworkspace
|
||
| Red Hat | Red Hat OpenShift distributed tracing 3 |
cpe:/a:redhat:openshift_distributed_tracing:3
|
||
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config
|
||
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1
|
||
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4
|
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
cpe:/a:redhat:openstack:16.2
|
||
| Red Hat | Red Hat OpenStack Platform 17.1 |
cpe:/a:redhat:openstack:17.1
|
||
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0
|
||
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3
|
||
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6
|
||
| Red Hat | Red Hat Service Interconnect 1 |
cpe:/a:redhat:service_interconnect:1
|
||
| Red Hat | Red Hat Service Interconnect 2 |
cpe:/a:redhat:service_interconnect:2
|
||
| Red Hat | Red Hat Trusted Artifact Signer |
cpe:/a:redhat:trusted_artifact_signer:1
|
||
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1
|
||
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1
|
||
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-42499",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-08T16:55:28.873015Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-05-08T21:29:59.662Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "cri-o",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.32.13-9.rhaos4.19.git2100f27.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "openshift-clients",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el8"
],
"defaultStatus": "affected",
"packageName": "ose-aws-ecr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cert_manager:1.19::el9"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "Cert Manager support for Red Hat OpenShift release 1.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786613805",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-loki-rhel9",
"product": "Logging for Red Hat OpenShift 6.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785419067",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-loki-rhel9",
"product": "Logging for Red Hat OpenShift 6.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782405469",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-loki-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784748010",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:logging:6.5::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/logging-loki-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift 6.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786645248",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/backplane-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786912006",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-plugin-rhel9",
"product": "OpenShift API for Data Protection 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785177357",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784058822",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783357116",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783357140",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-rhel9-operator",
"product": "Red Hat Developer Hub 1.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783447707",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-rhel9-operator",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782767215",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-25-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.25.10-2.2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-26-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.26.3-2.2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhmt:1.8::el8"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-controller-rhel8",
"product": "Red Hat Migration Toolkit 1.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783953372",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8.1::el9"
],
"defaultStatus": "affected",
"packageName": "mta/mta-cli-rhel9",
"product": "Red Hat Migration Toolkit for Applications 8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785171639",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8.2::el9"
],
"defaultStatus": "affected",
"packageName": "mta/mta-cli-rhel9",
"product": "Red Hat Migration Toolkit for Applications 8.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784211378",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kueue-controller-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783544461",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cli-rhel9",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786489910",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.20::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cli-rhel9",
"product": "Red Hat OpenShift Container Platform 4.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786494900",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-cli-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786496647",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-hypershift-rhel9",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786573075",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222217",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782223341",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782296193",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222607",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222163",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782223138",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222394",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222451",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782226178",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782224487",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782303211",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782224541",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782223045",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222366",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782310747",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782222038",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0.12::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785202723",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_snr:0.13::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/self-node-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_sbr:0.3::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/storage-based-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203474",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0.7::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/machine-deletion-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203508",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0.8::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/fence-agents-remediation-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 0.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785203079",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:workload_availability_nmo:5.7::el9"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-maintenance-rhel9-operator",
"product": "Red Hat OpenShift Workload Availability 5.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785202847",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783750447",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783751865",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1784353904",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784351966",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783955846",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784125838",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "conforma-cli-stack-v1",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.2",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "build-of-trustee/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "confidential-compute-attestation-tech-preview/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "affected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "unknown",
"packageName": "gatekeeper/gatekeeper-rhel9-operator",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "affected",
"packageName": "lvms4/lvms-rhel9-operator",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/topolvm-rhel8",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/topolvm-rhel9",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multiarch_tuning_operator"
],
"defaultStatus": "affected",
"packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
"product": "Multiarch Tuning Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/addon-manager-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/assisted-installer-rhel8",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/assisted-installer-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/maestro-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/multicloud-manager-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/placement-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/registration-operator-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/work-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
],
"defaultStatus": "unknown",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel8",
"product": "Multicluster Global Hub",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub"
],
"defaultStatus": "unknown",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "unaffected",
"packageName": "network-observability/network-observability-rhel9-operator",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "affected",
"packageName": "helm",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines-client",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "kn-workflow-plugin",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-golang-builder-container",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/pilot-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "affected",
"packageName": "openshift-golang-builder-container",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "affected",
"packageName": "openshift-power-monitoring/power-monitoring-rhel9-operator",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/config-policy-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/governance-policy-propagator-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/klusterlet-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unknown",
"packageName": "rhacm2/thanos-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unknown",
"packageName": "ansible-automation-platform/platform-operator-bundle",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unknown",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unknown",
"packageName": "automation-gateway-proxy-openssl30",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unknown",
"packageName": "automation-gateway-proxy-openssl32",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:5"
],
"defaultStatus": "affected",
"packageName": "rhceph/rhceph-5-dashboard-rhel8",
"product": "Red Hat Ceph Storage 5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:6"
],
"defaultStatus": "affected",
"packageName": "rhceph/rhceph-6-dashboard-rhel9",
"product": "Red Hat Ceph Storage 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:9"
],
"defaultStatus": "affected",
"packageName": "rhceph/alloy-rhel10",
"product": "Red Hat Ceph Storage 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:certifications:9"
],
"defaultStatus": "affected",
"packageName": "redhat-certification-preflight",
"product": "Red Hat Certification Program for Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
],
"defaultStatus": "unknown",
"packageName": "flightctl",
"product": "Red Hat Edge Manager 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
],
"defaultStatus": "unknown",
"packageName": "rhem/flightctl-api-rhel9",
"product": "Red Hat Edge Manager 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "rhel10/bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unknown",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "container-tools:rhel8/buildah",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "container-tools:rhel8/conmon",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "container-tools:rhel8/podman",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "container-tools:rhel8/skopeo",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "go-toolset:rhel8/golang",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unknown",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "rhel9/bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unknown",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lightspeed_for_runtimes:1"
],
"defaultStatus": "unknown",
"packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
"product": "Red Hat Lightspeed for Runtimes Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ai-gateway-payload-processing-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kserve-llmisvc-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kube-auth-proxy-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kueue-controller-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-llm-d-inference-scheduler-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-llm-d-routing-sidecar-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-maas-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-mlflow-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-api-server-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-driver-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-launcher-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mod-arch-gen-ai-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-modelmesh-serving-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-operator-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-model-serving-api-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workload-variant-autoscaler-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"packageName": "ocm-cli-clients/ocm-cli-rhel9",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ignition",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "kata-containers",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "microshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-installer",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-node",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-sdn-rhel7",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-sdn-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-sdn-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift-golang-builder-container",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ose-azure-acr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "ose-gcp-gcr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "ocs4/cephcsi-rhel8",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "odf4/cephcsi-rhel8",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "affected",
"packageName": "devspaces/configbump-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "affected",
"packageName": "devspaces/traefik-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:devworkspace"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-rhel9-operator",
"product": "Red Hat OpenShift Dev Workspaces Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "affected",
"packageName": "rhosdt/tempo-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/virt-api-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "kubevirt",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "openshift-golang-builder-container",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel8/osp-director-operator-bundle",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel9/osp-director-operator-bundle",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "rhoso-operators/ovn-rhel9-operator",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/quay-builder-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unknown",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:1"
],
"defaultStatus": "affected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "affected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "unknown",
"packageName": "rhtas/ec-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-security-profiles-rhel8-operator",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-05-07T19:41:18.615Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1046",
"description": "Creation of Immutable Text Using String Concatenation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-25T12:05:59.440Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"name": "RHBZ#2467809",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54552"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34364"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:56340"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36625"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36754"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17713"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17714"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41928"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50300"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42644"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54555"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54602"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54583"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33120"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33123"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33142"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33150"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42146"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43052"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41066"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41031"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57194"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:54552: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"lang": "en",
"value": "RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4"
},
{
"lang": "en",
"value": "RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"lang": "en",
"value": "RHSA-2026:50843: Logging for Red Hat OpenShift 6.0"
},
{
"lang": "en",
"value": "RHSA-2026:47952: Logging for Red Hat OpenShift 6.2"
},
{
"lang": "en",
"value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
},
{
"lang": "en",
"value": "RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:36754: Red Hat Developer Hub 1.10"
},
{
"lang": "en",
"value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:17713: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:17714: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:41928: Red Hat Migration Toolkit 1.8"
},
{
"lang": "en",
"value": "RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1"
},
{
"lang": "en",
"value": "RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2"
},
{
"lang": "en",
"value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:54555: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:54583: Red Hat OpenShift Container Platform 4.2"
},
{
"lang": "en",
"value": "RHSA-2026:33120: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:33123: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:33142: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:33150: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12"
},
{
"lang": "en",
"value": "RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13"
},
{
"lang": "en",
"value": "RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3"
},
{
"lang": "en",
"value": "RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7"
},
{
"lang": "en",
"value": "RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8"
},
{
"lang": "en",
"value": "RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7"
},
{
"lang": "en",
"value": "RHSA-2026:42146: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:43052: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:42796: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:41066: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:41031: Red Hat Quay 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:40262: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11.0"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-07T20:00:51.685Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-05-07T19:41:18.615Z",
"value": "Made public."
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "net/mail",
"product": "net/mail",
"programRoutines": [
{
"name": "addrParser.consumePhrase"
},
{
"name": "AddressParser.Parse"
},
{
"name": "AddressParser.ParseList"
},
{
"name": "Header.AddressList"
},
{
"name": "ParseAddress"
},
{
"name": "ParseAddressList"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.25.10",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "1.26.3",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-407: Inefficient Algorithmic Complexity",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-07T19:41:18.615Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/issue/78987"
},
{
"url": "https://go.dev/cl/771520"
},
{
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"title": "Quadratic string concatenation in consumePhrase in net/mail"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-42499",
"datePublished": "2026-05-07T19:41:18.615Z",
"dateReserved": "2026-04-28T00:21:12.791Z",
"dateUpdated": "2026-08-25T12:05:59.440Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-42499",
"date": "2026-08-25",
"epss": "0.00798",
"percentile": "0.53755"
},
"microsoft_vex": {
"current_release_date": "2026-06-09T01:42:47.000Z",
"cve": "CVE-2026-42499",
"id": "msrc_CVE-2026-42499",
"initial_release_date": "2026-05-02T00:00:00.000Z",
"product_status:known_affected": "2",
"product_status:known_not_affected": "5",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Quadratic string concatenation in consumePhrase in net/mail",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-42499.json",
"version": "6"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-42499\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-05-07T20:16:44.540\",\"lastModified\":\"2026-08-25T13:19:01.603\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"Go standard library\",\"product\":\"net/mail\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"net/mail\",\"programRoutines\":[{\"name\":\"addrParser.consumePhrase\"},{\"name\":\"AddressParser.Parse\"},{\"name\":\"AddressParser.ParseList\"},{\"name\":\"Header.AddressList\"},{\"name\":\"ParseAddress\"},{\"name\":\"ParseAddressList\"}],\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.25.10\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.26.0-0\",\"lessThan\":\"1.26.3\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cri-o\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:1.32.13-9.rhaos4.19.git2100f27.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-clients\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ose-aws-ecr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el8\"],\"versions\":[{\"version\":\"0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cert Manager support for Red Hat OpenShift release 1.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1.19::el9\"],\"versions\":[{\"version\":\"1786613805\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/logging-loki-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.0::el9\"],\"versions\":[{\"version\":\"1785419067\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging for Red Hat OpenShift 6.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/logging-loki-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.4::el9\"],\"versions\":[{\"version\":\"1782405469\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/logging-loki-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.2::el9\"],\"versions\":[{\"version\":\"1784748010\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift 6.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-logging/logging-loki-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6.5::el9\"],\"versions\":[{\"version\":\"1786645248\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/backplane-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786912006\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-plugin-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"],\"versions\":[{\"version\":\"1785177357\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.6::el9\"],\"versions\":[{\"version\":\"1784058822\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1783357116\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1783357140\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.10::el9\"],\"versions\":[{\"version\":\"1783447707\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1782767215\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-25-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.25.10-2.2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-26-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.26.3-2.2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit 1.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhmtc/openshift-migration-controller-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1.8::el8\"],\"versions\":[{\"version\":\"1783953372\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit for Applications 8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8.1::el9\"],\"versions\":[{\"version\":\"1785171639\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Migration Toolkit for Applications 8.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8.2::el9\"],\"versions\":[{\"version\":\"1784211378\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-kueue-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1783544461\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"],\"versions\":[{\"version\":\"1786489910\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.20::el9\"],\"versions\":[{\"version\":\"1786494900\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1786496647\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-hypershift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1786573075\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782222217\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782223341\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782296193\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1782222607\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782222163\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782223138\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782222394\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1782222451\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782226178\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782224487\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782303211\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1782224541\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782223045\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782222366\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782310747\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1782222038\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/node-healthcheck-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0.12::el9\"],\"versions\":[{\"version\":\"1785202723\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/self-node-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_snr:0.13::el9\"],\"versions\":[{\"version\":\"1785203036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/storage-based-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_sbr:0.3::el9\"],\"versions\":[{\"version\":\"1785203474\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/machine-deletion-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0.7::el9\"],\"versions\":[{\"version\":\"1785203508\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 0.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/fence-agents-remediation-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0.8::el9\"],\"versions\":[{\"version\":\"1785203079\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Workload Availability 5.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"workload-availability/node-maintenance-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nmo:5.7::el9\"],\"versions\":[{\"version\":\"1785202847\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"],\"versions\":[{\"version\":\"1783750447\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.12::el8\"],\"versions\":[{\"version\":\"1783751865\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1784353904\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"],\"versions\":[{\"version\":\"1784351966\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1783955846\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"],\"versions\":[{\"version\":\"1784125838\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conforma-cli-stack-v1\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"4-1.4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"4-1.4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"build-of-trustee/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"confidential-compute-attestation-tech-preview/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel8\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel9\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multiarch Tuning Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multiarch-tuning/multiarch-tuning-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multiarch_tuning_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/addon-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/assisted-installer-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/clusterlifecycle-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/maestro-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/managedcluster-import-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/multicloud-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/placement-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/registration-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/work-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"helm\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines-client\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kn-workflow-plugin\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/pilot-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-power-monitoring/power-monitoring-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-framework-addon-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/config-policy-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/governance-policy-propagator-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/klusterlet-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/thanos-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/platform-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl30\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl32\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/rhceph-5-dashboard-rhel8\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/rhceph-6-dashboard-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/alloy-rhel10\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Certification Program for Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"redhat-certification-preflight\",\"cpes\":[\"cpe:/a:redhat:certifications:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhem/flightctl-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10-eus/rhel-10.0-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-toolset:rhel8/golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9-eus/rhel-9.6-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Lightspeed for Runtimes Operator\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lightspeed_for_runtimes:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ai-gateway-payload-processing-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-llmisvc-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kube-auth-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kueue-controller-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-inference-scheduler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llm-d-routing-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-maas-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-api-server-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-launcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mod-arch-gen-ai-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-modelmesh-serving-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-serving-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workload-variant-autoscaler-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocm-cli-clients/ocm-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kata-containers\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"microshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-installer\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-node\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel7\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-sdn-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-azure-acr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-gcp-gcr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocs4/cephcsi-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/cephcsi-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/configbump-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/traefik-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Workspaces Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devworkspace/devworkspace-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:devworkspace\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/tempo-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/virt-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kubevirt\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-golang-builder-container\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel8/osp-director-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/ovn-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-builder-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/ec-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-security-profiles-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-05-08T16:55:28.873015Z\",\"id\":\"CVE-2026-42499\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1046\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.25.10\",\"matchCriteriaId\":\"1C966EF3-C51C-4239-B5FC-C44A5202FEC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.26.0\",\"versionEndExcluding\":\"1.26.3\",\"matchCriteriaId\":\"522E4CD0-2B99-4363-9C78-0BAFD988A2D6\"}]}]}],\"references\":[{\"url\":\"https://go.dev/cl/771520\",\"source\":\"security@golang.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://go.dev/issue/78987\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\",\"source\":\"security@golang.org\",\"tags\":[\"Release Notes\"]},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-4977\",\"source\":\"security@golang.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17713\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17714\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33120\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33123\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33142\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33150\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33574\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34364\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36625\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36754\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36797\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41031\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41066\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41928\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42146\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42644\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43038\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43052\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43692\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47952\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50300\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50843\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51033\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54274\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54283\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54284\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54285\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54286\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54287\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54531\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54552\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54555\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54583\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54602\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:56340\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-42499\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2467809\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-25T16:20:17+00:00",
"cve": "CVE-2026-42499",
"id": "CVE-2026-42499",
"initial_release_date": "2026-05-07T19:41:18.615000+00:00",
"product_status:fixed": "313",
"product_status:known_affected": "131",
"product_status:known_not_affected": "2976",
"product_status:under_investigation": "113",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"net/mail: golang: net/mail: Denial of Service via pathological email address parsing\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.32.13-9.rhaos4.19.git2100f27.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cri-o\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-clients\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ose-aws-ecr-image-credential-provider\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cert Manager support for Red Hat OpenShift release 1.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786613805\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785419067\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/logging-loki-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging for Red Hat OpenShift 6.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782405469\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/logging-loki-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784748010\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/logging-loki-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift 6.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786645248\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-logging/logging-loki-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/backplane-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786912006\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785177357\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-plugin-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784058822\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783357116\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783357140\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783447707\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782767215\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.25.10-2.2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-25-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.26.3-2.2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-26-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1.8::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit 1.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783953372\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhmtc/openshift-migration-controller-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit for Applications 8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785171639\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Migration Toolkit for Applications 8.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784211378\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783544461\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-kueue-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786489910\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.20::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786494900\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786496647\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786573075\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-hypershift-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222217\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782223341\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782296193\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222607\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222163\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782223138\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222394\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222451\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782226178\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782224487\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782303211\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782224541\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782223045\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222366\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782310747\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782222038\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785202723\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/node-healthcheck-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_snr:0.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/self-node-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_sbr:0.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203474\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/storage-based-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203508\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/machine-deletion-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 0.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785203079\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/fence-agents-remediation-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nmo:5.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Workload Availability 5.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785202847\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"workload-availability/node-maintenance-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783750447\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783751865\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1784353904\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784351966\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783955846\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784125838\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4-1.4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"4-1.4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"conforma-cli-stack-v1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"build-of-trustee/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"confidential-compute-attestation-tech-preview/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-monitor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/lvms-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multiarch_tuning_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Multiarch Tuning Operator\", \"packageName\": \"multiarch-tuning/multiarch-tuning-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/addon-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/assisted-installer-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/clusterlifecycle-state-metrics-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/maestro-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/managedcluster-import-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/multicloud-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/placement-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/registration-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/work-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub\", \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub\", \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"helm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"kn-workflow-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/pilot-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_power_monitoring\"], \"vendor\": \"Red Hat\", \"product\": \"Power monitoring for Red Hat OpenShift\", \"packageName\": \"openshift-power-monitoring/power-monitoring-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-framework-addon-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/config-policy-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/governance-policy-propagator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/klusterlet-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/thanos-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/platform-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl30\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl32\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:5\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 5\", \"packageName\": \"rhceph/rhceph-5-dashboard-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 6\", \"packageName\": \"rhceph/rhceph-6-dashboard-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 9\", \"packageName\": \"rhceph/alloy-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:certifications:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Certification Program for Red Hat Enterprise Linux 9\", \"packageName\": \"redhat-certification-preflight\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1\", \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1\", \"packageName\": \"rhem/flightctl-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10-eus/rhel-10.0-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"go-toolset:rhel8/golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9-eus/rhel-9.6-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lightspeed_for_runtimes:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Lightspeed for Runtimes Operator\", \"packageName\": \"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ai-gateway-payload-processing-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-llmisvc-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kube-auth-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kueue-controller-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-inference-scheduler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llm-d-routing-sidecar-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-maas-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-api-server-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-launcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mod-arch-gen-ai-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-modelmesh-serving-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-operator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-serving-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workload-variant-autoscaler-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Cluster Manager CLI\", \"packageName\": \"ocm-cli-clients/ocm-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"kata-containers\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"microshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-installer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-node\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel7\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-sdn-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-azure-acr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-gcp-gcr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"ocs4/cephcsi-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/cephcsi-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/configbump-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/traefik-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Workspaces Operator\", \"packageName\": \"devworkspace/devworkspace-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/tempo-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/virt-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"openshift-golang-builder-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"rhosp-rhel8/osp-director-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/ovn-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-builder-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 1\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/ec-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-security-profiles-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-07T20:00:51.685Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-05-07T19:41:18.615Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:54552: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34364: Logging Subsystem for Red Hat OpenShift 6.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:56340: Logging Subsystem for Red Hat OpenShift 6.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50843: Logging for Red Hat OpenShift 6.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47952: Logging for Red Hat OpenShift 6.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51033: OpenShift API for Data Protection 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43692: OpenShift API for Data Protection 1.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36319: Red Hat Advanced Cluster Security 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36754: Red Hat Developer Hub 1.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33574: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17713: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17714: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41928: Red Hat Migration Toolkit 1.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50300: Red Hat Migration Toolkit for Applications 8.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43038: Red Hat Migration Toolkit for Applications 8.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42644: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54555: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54602: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54583: Red Hat OpenShift Container Platform 4.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33120: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33123: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33142: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33150: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54287: Red Hat OpenShift Workload Availability 0.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54284: Red Hat OpenShift Workload Availability 0.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54286: Red Hat OpenShift Workload Availability 0.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54285: Red Hat OpenShift Workload Availability 0.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54274: Red Hat OpenShift Workload Availability 0.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54283: Red Hat OpenShift Workload Availability 5.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42146: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43052: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42796: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41066: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41031: Red Hat Quay 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40262: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57194: multicluster engine for Kubernetes 2.11.0\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-05-07T19:41:18.615Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-42499\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2467809\", \"name\": \"RHBZ#2467809\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54552\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54531\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34364\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:56340\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50843\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47952\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51033\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43692\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36625\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36754\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33574\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17713\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17714\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41928\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50300\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43038\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42644\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54555\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54602\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54583\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33120\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33123\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33142\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33150\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54287\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54284\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54286\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54285\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54274\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54283\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42146\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43052\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41066\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41031\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36797\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57194\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-1046\", \"description\": \"Creation of Immutable Text Using String Concatenation\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-25T12:05:59.440Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-42499\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-08T16:55:28.873015Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-08T16:55:43.428Z\"}}], \"cna\": {\"title\": \"Quadratic string concatenation in consumePhrase in net/mail\", \"affected\": [{\"vendor\": \"Go standard library\", \"product\": \"net/mail\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.25.10\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.26.0-0\", \"lessThan\": \"1.26.3\", \"versionType\": \"semver\"}], \"packageName\": \"net/mail\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"addrParser.consumePhrase\"}, {\"name\": \"AddressParser.Parse\"}, {\"name\": \"AddressParser.ParseList\"}, {\"name\": \"Header.AddressList\"}, {\"name\": \"ParseAddress\"}, {\"name\": \"ParseAddressList\"}]}], \"references\": [{\"url\": \"https://go.dev/issue/78987\"}, {\"url\": \"https://go.dev/cl/771520\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/qcCIEXso47M\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-4977\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-407: Inefficient Algorithmic Complexity\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-05-07T19:41:18.615Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-42499\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-25T12:05:59.440Z\", \"dateReserved\": \"2026-04-28T00:21:12.791Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-05-07T19:41:18.615Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:50888
Vulnerability from csaf_redhat - Published: 2026-08-05 18:08 - Updated: 2026-08-25 19:02Summary
Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
Severity
Important
Notes
Topic: The 1.4.3 release of the RHTAS CLIs.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS CLI Stack images for RHTAS 1.4.3
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
References
126 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.3 release of the RHTAS CLIs.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS CLI Stack images for RHTAS 1.4.3",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:50888",
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50888.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release",
"tracking": {
"current_release_date": "2026-08-25T19:02:58+00:00",
"generator": {
"date": "2026-08-25T19:02:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:50888",
"initial_release_date": "2026-08-05T18:08:33+00:00",
"revision_history": [
{
"date": "2026-08-05T18:08:33+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T19:02:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product_id": "conforma-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_amd64.tar.gz\u0026checksum=sha256%3Abd510871ddd70ad4c77eec429f8ca4161fa6f8016bf9b21109457657d95dd206\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product_id": "cosign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_amd64.tar.gz\u0026checksum=sha256%3A8ada7c9cb3128cca17ed34bf2c1cb2937b4a23597b655566e435ec38cd384353\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_amd64.tar.gz\u0026checksum=sha256%3A38a6fefa4556a7ba4847569f1ca8387150ba7118bd03bee3c9829abf8d665ea5\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_id": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3A8f0e7e990c9c5992ae02bbf0205ca679a65edf4a7f349443fce511c110a09171\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3A83fb045b349eb3f2c1c36949d6fa40c12d1a0e5d71b15284c77141725eec0497\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product_id": "rekor-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3Af16aeafac638580028087659b7f9ce4f61bcd53fb16138b1bab9ff5b08843748\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product_id": "trillian-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_darwin_amd64.tar.gz\u0026checksum=sha256%3A2bd80e13a7c451009b57e9a5b3cdfbd9ae7f84a5b56957e19b57e2a22c1091ae\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product_id": "conforma-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_arm64.tar.gz\u0026checksum=sha256%3Aa0d471228842a02917d01cedf6fc2a64c9198d08e17d22e149ea4188ca4da3ea\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product_id": "cosign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_arm64.tar.gz\u0026checksum=sha256%3A2b3901b9cb7f02ad5a3d449a6de2d70a2ed9e3069d01ac819becd0590a8bdcdd\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_arm64.tar.gz\u0026checksum=sha256%3A158a23a2839854bb8e26133a8916acad1bb305d8defb9b3d540b8b89004fa240\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_id": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3Adbdb81bb2ba208c3b15025289d4f1813b1e09c9b229f71e82201ec2caf86f751\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3A5d1379f5f38ea788dfb05ac5c5ee1a979bf5be8bbfa1357962a2be2b182bd784\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product_id": "rekor-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3A8d2a32ff42f82f7839cb59f0dcddf12882a0e0132fbd6c2c94dacc67e1fadd62\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product_id": "trillian-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_darwin_arm64.tar.gz\u0026checksum=sha256%3A147842ba7f5d7d777a9a17a93ec11a06439f0c8fa3aa3bb93e7905e7bb5378b1\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "arm64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64",
"product": {
"name": "conforma-cli-stack-v1-4@amd64",
"product_id": "conforma-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_amd64.tar.gz\u0026checksum=sha256%3Afe850ff78ccd6a2536761252abe869b12e8555099b903088fb77415db810faeb\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64",
"product": {
"name": "cosign-cli-stack-v1-4@amd64",
"product_id": "cosign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_amd64.tar.gz\u0026checksum=sha256%3Ab5ad8965d128b0362f978262a8cec0b97e5b8a017cc9f3bdf792d481f39cdca9\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_amd64.tar.gz\u0026checksum=sha256%3A7bcaae762c0ae4bc631e055469984b58a6a3f63178919c783c64b04800054d3c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64",
"product_id": "gitsign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_amd64.tar.gz\u0026checksum=sha256%3A092ff1a20e6b3a586c45f15322c234c509c907013a6d281e61b37dbdf8d08da6\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64",
"product_id": "model-transparency-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_amd64.tar.gz\u0026checksum=sha256%3A644c135df58d8349afd7ef6161939a6e32d0378fe3ddd79e8ebc2e6e121c0a7c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64",
"product": {
"name": "rekor-cli-stack-v1-4@amd64",
"product_id": "rekor-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ac2cd95304bf21ddb404f75d2752edd9b0ac1dcacb5d00bc33e9a1e50a60b8263\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64",
"product": {
"name": "trillian-cli-stack-v1-4@amd64",
"product_id": "trillian-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_amd64.tar.gz\u0026checksum=sha256%3A8e7969ad725e923cd4b5106cd9c001274b2f599c147f94ab88c7983e77779518\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "tuftool-cli-stack-v1-4@amd64",
"product": {
"name": "tuftool-cli-stack-v1-4@amd64",
"product_id": "tuftool-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/tuftool-cli-stack-v1-4@1.4.3?filename=tuftool_linux_amd64.tar.gz\u0026checksum=sha256%3A99bac870e85db0b22ed0881c93e811cf70eed102b47d41a3a3c1cae7e0da6f24\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64",
"product": {
"name": "conforma-cli-stack-v1-4@arm64",
"product_id": "conforma-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_arm64.tar.gz\u0026checksum=sha256%3A23de179f43a4145d1b9fa681e0f15b681d7a5bc3f2a5d4237db305b7ecde4f75\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64",
"product": {
"name": "cosign-cli-stack-v1-4@arm64",
"product_id": "cosign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_arm64.tar.gz\u0026checksum=sha256%3A92016ad84dd2cc43e8cd4d4a12dc5c09f9c5917d72058d4a8ec4b80f57721552\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_arm64.tar.gz\u0026checksum=sha256%3Aacf168c048297dd0845a9258ff05122b5ac04133983ec12185889fa4e24c949e\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64",
"product_id": "gitsign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_arm64.tar.gz\u0026checksum=sha256%3Af1d2cd7760f778bdde8a93fce683b01a5d35b75a5e70244ef54706be23d64e88\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64",
"product_id": "model-transparency-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_arm64.tar.gz\u0026checksum=sha256%3A153247e5c490219a2d2c64b1dd109c273d31b08fec64e499b0da6d81d5a426b2\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64",
"product": {
"name": "rekor-cli-stack-v1-4@arm64",
"product_id": "rekor-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_arm64.tar.gz\u0026checksum=sha256%3Aff0c33eb7f4e82f523a1f84591f42b58319f146cdf486e5f303cc1d7d102d139\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64",
"product": {
"name": "trillian-cli-stack-v1-4@arm64",
"product_id": "trillian-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_arm64.tar.gz\u0026checksum=sha256%3Ab272964a73e058251845e12b2bc07f4398d391a7a642e4d3fdf003d7e3651d0a\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@ppc64le",
"product": {
"name": "conforma-cli-stack-v1-4@ppc64le",
"product_id": "conforma-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_ppc64le.tar.gz\u0026checksum=sha256%3A43c5e32c8b05224fcdb8fd4e02fc95a0c45c697ce02fe845cbc6c0b65011914b\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@ppc64le",
"product": {
"name": "cosign-cli-stack-v1-4@ppc64le",
"product_id": "cosign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_ppc64le.tar.gz\u0026checksum=sha256%3Ace54373736d56eeb9fd9196e4e8d154a19e0c1be4f79a7e49c45189204b8be8c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_ppc64le.tar.gz\u0026checksum=sha256%3A3d26686ce8a19183d0c1594d9fba01502db3d5bbf314f03220045546ebff21b9\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product": {
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product_id": "gitsign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3Ab36b2473abf86da8d1946d7f1cfc98fc915c824e674134150da42fe2c909cb40\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product": {
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product_id": "model-transparency-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3Ac6a6924aadf33d43839b09a41cc99c6552add5cca758c30de2715c4c2d39c7c6\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@ppc64le",
"product": {
"name": "rekor-cli-stack-v1-4@ppc64le",
"product_id": "rekor-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3Abcc90bfef837fe04e832ba21034aaba9419e72458899dd7929ef117c739d83ba\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@ppc64le",
"product": {
"name": "trillian-cli-stack-v1-4@ppc64le",
"product_id": "trillian-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_ppc64le.tar.gz\u0026checksum=sha256%3Af54b20dafe80d52dbd0b2ac9feeef7dd469312b8e5a430669627bb7b22757f9a\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@s390x",
"product": {
"name": "conforma-cli-stack-v1-4@s390x",
"product_id": "conforma-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_s390x.tar.gz\u0026checksum=sha256%3A899d90fa1e4004deecfd748edc9bc08a11b81f0e1918248288d783c0779dfaa1\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@s390x",
"product": {
"name": "cosign-cli-stack-v1-4@s390x",
"product_id": "cosign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_s390x.tar.gz\u0026checksum=sha256%3Abda606880c51943c4d359dfb0dab673f5054ea3cfbe0bf7f60c080992ccba6cb\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_s390x.tar.gz\u0026checksum=sha256%3A3fc5432f460b74b4c9fd34bc8ee53dcbe75f21cd507f604a97245e5a6099eeec\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@s390x",
"product": {
"name": "gitsign-cli-stack-v1-4@s390x",
"product_id": "gitsign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_s390x.tar.gz\u0026checksum=sha256%3Ace7d0514a83e7c3de696c2c7530a102f43ab81443c96c335e0c9b717aae704f6\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@s390x",
"product": {
"name": "model-transparency-cli-stack-v1-4@s390x",
"product_id": "model-transparency-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_s390x.tar.gz\u0026checksum=sha256%3Afe19f79e90f4d3f73d37b8cd51bba6574c9e365b8dc147bdd92f2623cf223053\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@s390x",
"product": {
"name": "rekor-cli-stack-v1-4@s390x",
"product_id": "rekor-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_s390x.tar.gz\u0026checksum=sha256%3A293ed031b6a8265b30dea4c61ea793b98f783c1f5919bba9d89e0807df181dce\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@s390x",
"product": {
"name": "trillian-cli-stack-v1-4@s390x",
"product_id": "trillian-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_s390x.tar.gz\u0026checksum=sha256%3Ad14b422dd794265f466b50df38052d6b65ccc44758d6970b8aaf63def82a5238\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product_id": "conforma-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_windows_amd64.zip\u0026checksum=sha256%3A31be5f7fd0a135f1251ba47c3772dd2d3804b568bee4ddb644284d1a5ba46e54\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product_id": "cosign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_windows_amd64.zip\u0026checksum=sha256%3A988f094e519e8e6f6f19d73e132a4d78e85d552d6c18ed93eb387284e02bb91c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_windows_amd64.zip\u0026checksum=sha256%3A8144083b1b7cda5bf4c4514f695298dd9db8337f012eceb50ad55791a5aca14f\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product_id": "gitsign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_windows_amd64.zip\u0026checksum=sha256%3Ac5caaa0e3d970b115e8882ca559a3c646876b1b8715d2b1595893069d148a975\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_id": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_windows_amd64.exe.gz\u0026checksum=sha256%3Ae3069473632f310db5789c9aa163357be419fd63e9207ce172eb4983ad238ce8\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product_id": "rekor-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_windows_amd64.zip\u0026checksum=sha256%3Aa693c0e3c59eb810900e3108f5917c6811040dfea4dbe7546dabadc77308d023\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product_id": "trillian-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_windows_amd64.zip\u0026checksum=sha256%3Ab12859b13938626a1139a4afc3b202a80ece5ffd72c51da782f7e0516733dd6c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64_windows"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64"
},
"product_reference": "conforma-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64"
},
"product_reference": "conforma-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le"
},
"product_reference": "conforma-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
},
"product_reference": "conforma-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64"
},
"product_reference": "cosign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64"
},
"product_reference": "cosign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le"
},
"product_reference": "cosign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x"
},
"product_reference": "cosign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le"
},
"product_reference": "gitsign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x"
},
"product_reference": "gitsign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le"
},
"product_reference": "model-transparency-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x"
},
"product_reference": "model-transparency-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64"
},
"product_reference": "rekor-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64"
},
"product_reference": "rekor-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le"
},
"product_reference": "rekor-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x"
},
"product_reference": "rekor-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64"
},
"product_reference": "trillian-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64"
},
"product_reference": "trillian-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le"
},
"product_reference": "trillian-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x"
},
"product_reference": "trillian-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tuftool-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
},
"product_reference": "tuftool-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:51033
Vulnerability from csaf_redhat - Published: 2026-08-06 07:31 - Updated: 2026-08-25 19:09Summary
Red Hat Security Advisory: Red Hat OpenShift API for Data Protection
Severity
Important
Notes
Topic: A new version of OpenShift API for Data Protection (OADP) is now available.
Details: OpenShift API for Data Protection (OADP) enables you to back up and restore
application resources, persistent volume data, and internal container
images to external backup storage. OADP enables both file system-based and
snapshot-based backups for persistent volumes.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A local privilege escalation vulnerability has been discovered in containerd. This vulnerability is the result of an overly broad default permission which allows local users on the host to potentially access the metadata store, the content store and the contents of Kubernetes local volumes. The contents of volumes might include setuid binaries, which could allow a local user on the host to elevate privileges on the host.
7.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Threats
Impact
Important
A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.
7.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Threats
Impact
Important
A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Threats
Impact
Important
References
257 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of OpenShift API for Data Protection (OADP) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift API for Data Protection (OADP) enables you to back up and restore\napplication resources, persistent volume data, and internal container\nimages to external backup storage. OADP enables both file system-based and\nsnapshot-based backups for persistent volumes.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:51033",
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-25621",
"url": "https://access.redhat.com/security/cve/CVE-2024-25621"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61728",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66506",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33747",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33748",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42306",
"url": "https://access.redhat.com/security/cve/CVE-2026-42306"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51033.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift API for Data Protection",
"tracking": {
"current_release_date": "2026-08-25T19:09:27+00:00",
"generator": {
"date": "2026-08-25T19:09:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:51033",
"initial_release_date": "2026-08-06T07:31:01+00:00",
"revision_history": [
{
"date": "2026-08-06T07:31:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T19:09:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift API for Data Protection 1.3",
"product": {
"name": "OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
}
}
}
],
"category": "product_family",
"name": "OpenShift API for Data Protection"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1785180801"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1785177413"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1785177359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1785426166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"product_id": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-operator-bundle@sha256%3Abf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-operator-bundle\u0026tag=1785427055"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1785180878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1785177357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Ab26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1785177325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256%3Ae23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1785177350"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Afd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1785426129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1785177322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1785177438"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1785180801"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1785177413"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1785177359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1785426166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1785180878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1785177357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1785177325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256%3A9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1785177350"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1785426129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1785177322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3Abe6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1785177438"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1785180801"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1785177413"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Acc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1785177359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Ab38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1785426166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1785180878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1785177357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1785177325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256%3A345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1785177350"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Afa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1785426129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1785177322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1785177438"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1785180801"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Acf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1785177413"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Aeea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1785177359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Ac2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1785426166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1785180878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3Ac612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1785177357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1785177325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256%3A46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1785177350"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1785426129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Abd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1785177322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3Aaebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1785177438"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25621",
"cwe": {
"id": "CWE-279",
"name": "Incorrect Execution-Assigned Permissions"
},
"discovery_date": "2025-11-06T19:01:04.402278+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2413190"
}
],
"notes": [
{
"category": "description",
"text": "A local privilege escalation vulnerability has been discovered in containerd. This vulnerability is the result of an overly broad default permission which allows local users on the host to potentially access the metadata store, the content store and the contents of Kubernetes local volumes. The contents of volumes might include setuid binaries, which could allow a local user on the host to elevate privileges on the host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd local privilege escalation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25621"
},
{
"category": "external",
"summary": "RHBZ#2413190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2413190"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25621",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25621"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25621",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25621"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/blob/main/docs/rootless.md",
"url": "https://github.com/containerd/containerd/blob/main/docs/rootless.md"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/commit/7c59e8e9e970d38061a77b586b23655c352bfec5",
"url": "https://github.com/containerd/containerd/commit/7c59e8e9e970d38061a77b586b23655c352bfec5"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w"
}
],
"release_date": "2025-11-06T18:36:21.566000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "The system administrator on the host can manually chmod the directories to not\nhave group or world accessible permissions:\n```\nchmod 700 /var/lib/containerd\nchmod 700 /run/containerd/io.containerd.grpc.v1.cri\nchmod 700 /run/containerd/io.containerd.sandbox.controller.v1.shim\n```\nAn alternative mitigation would be to run containerd in rootless mode.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd local privilege escalation"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61728",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:39.965024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to be able to process a malicious zip archive with an application using the archive/zip package. Additionally, this vulnerability can cause a Go application to consume an excessive amount of CPU and memory, eventually resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "RHBZ#2434431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://go.dev/cl/736713",
"url": "https://go.dev/cl/736713"
},
{
"category": "external",
"summary": "https://go.dev/issue/77102",
"url": "https://go.dev/issue/77102"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4342",
"url": "https://pkg.go.dev/vuln/GO-2026-4342"
}
],
"release_date": "2026-01-28T19:30:31.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-66506",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2025-12-04T23:01:20.507333+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419056"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat as Fulcio, a certificate authority used for issuing code signing certificates, is susceptible to a denial of service when processing a specially crafted OpenID Connect (OIDC) token. This could lead to resource exhaustion and service unavailability in affected Red Hat products that utilize Fulcio.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "RHBZ#2419056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a",
"url": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw",
"url": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw"
}
],
"release_date": "2025-12-04T22:04:41.637000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33747",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T02:01:29.921765+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452076"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "RHBZ#2452076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"
}
],
"release_date": "2026-03-27T00:49:06.165000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"
},
{
"cve": "CVE-2026-33748",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T15:02:00.107493+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452271"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "RHBZ#2452271",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://docs.docker.com/build/concepts/context/#url-fragments",
"url": "https://docs.docker.com/build/concepts/context/#url-fragments"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"
}
],
"release_date": "2026-03-27T14:00:21.200000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42306",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-06-12T19:01:10.843543+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488484"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Moby container framework where a race condition during `docker cp` mount setup could allow a malicious container to overwrite arbitrary host files. Exploitation requires an attacker to have control over a running container, which could lead to data corruption or denial of service on the host system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42306"
},
{
"category": "external",
"summary": "RHBZ#2488484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488484"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42306"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306"
},
{
"category": "external",
"summary": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh",
"url": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh"
}
],
"release_date": "2026-06-12T18:09:22.188000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44740",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-01T17:01:53.685793+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483894"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "RHBZ#2483894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
"url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
"url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
"url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
}
],
"release_date": "2026-06-01T16:04:50.358000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
},
{
"cve": "CVE-2026-53492",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-01T19:01:34.238078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496130"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "RHBZ#2496130",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
}
],
"release_date": "2026-07-01T17:59:12.552000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
}
]
}
RHSA-2026:54274
Vulnerability from csaf_redhat - Published: 2026-08-12 10:05 - Updated: 2026-08-25 19:03Summary
Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.8.1 security update
Severity
Important
Notes
Topic: This is an updated version of the Fence Agents Remediation Operator.
This Operator is delivered by Red Hat Workload Availability (RHWA).
Details: The Fence Agents Remediation Operator fences and remediates nodes using
well-known agents. The remediation includes fencing the unhealthy node,
using a fencing agent, and then evicting workloads from the unhealthy node.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenTelemetry-Go. On BSD and Solaris platforms, a local attacker could exploit a vulnerability related to the `kenv` command. By manipulating the system's PATH environment variable, an attacker could achieve arbitrary code execution or privilege escalation, leading to a compromise of system integrity and confidentiality.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64 | — |
Vendor Fix
fix
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64 | — |
Workaround
|
Threats
Impact
Important
References
75 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "This is an updated version of the Fence Agents Remediation Operator.\nThis Operator is delivered by Red Hat Workload Availability (RHWA).",
"title": "Topic"
},
{
"category": "general",
"text": "The Fence Agents Remediation Operator fences and remediates nodes using\nwell-known agents. The remediation includes fencing the unhealthy node,\nusing a fencing agent, and then evicting workloads from the unhealthy node.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54274",
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39883",
"url": "https://access.redhat.com/security/cve/CVE-2026-39883"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54274.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.8.1 security update",
"tracking": {
"current_release_date": "2026-08-25T19:03:16+00:00",
"generator": {
"date": "2026-08-25T19:03:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54274",
"initial_release_date": "2026-08-12T10:05:52+00:00",
"revision_history": [
{
"date": "2026-08-12T10:05:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T19:03:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Workload Availability 0.8",
"product": {
"name": "Red Hat OpenShift Workload Availability 0.8",
"product_id": "Red Hat OpenShift Workload Availability 0.8",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:workload_availability_far:0.8::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Workload Availability"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"product_id": "registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"product_identification_helper": {
"purl": "pkg:oci/fence-agents-remediation-operator-bundle@sha256%3Af722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle\u0026tag=1785204008"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"product_id": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/fence-agents-remediation-rhel9-operator@sha256%3A5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator\u0026tag=1785203079"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"product": {
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"product_id": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"product_identification_helper": {
"purl": "pkg:oci/fence-agents-remediation-rhel9-operator@sha256%3A402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00?arch=s390x\u0026repository_url=registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator\u0026tag=1785203079"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64",
"product": {
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64",
"product_id": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64",
"product_identification_helper": {
"purl": "pkg:oci/fence-agents-remediation-rhel9-operator@sha256%3Ab9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58?arch=arm64\u0026repository_url=registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator\u0026tag=1785203079"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"product": {
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"product_id": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/fence-agents-remediation-rhel9-operator@sha256%3A0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323?arch=ppc64le\u0026repository_url=registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator\u0026tag=1785203079"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64 as a component of Red Hat OpenShift Workload Availability 0.8",
"product_id": "Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le as a component of Red Hat OpenShift Workload Availability 0.8",
"product_id": "Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le"
},
"product_reference": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x as a component of Red Hat OpenShift Workload Availability 0.8",
"product_id": "Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x"
},
"product_reference": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64 as a component of Red Hat OpenShift Workload Availability 0.8",
"product_id": "Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.8"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64 as a component of Red Hat OpenShift Workload Availability 0.8",
"product_id": "Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
},
"product_reference": "registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.8"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:05:52+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:05:52+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:05:52+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:05:52+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:05:52+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:05:52+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:05:52+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39883",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"discovery_date": "2026-04-08T21:01:31.690577+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456718"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go. On BSD and Solaris platforms, a local attacker could exploit a vulnerability related to the `kenv` command. By manipulating the system\u0027s PATH environment variable, an attacker could achieve arbitrary code execution or privilege escalation, leading to a compromise of system integrity and confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Arbitrary code execution via PATH hijacking on BSD/Solaris",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in OpenTelemetry-Go that allows a local attacker to achieve arbitrary code execution or privilege escalation through PATH hijacking. This vulnerability is specific to BSD and Solaris platforms due to the use of the `kenv` command and does not directly affect Red Hat Enterprise Linux environments. However, the vulnerable component is included in Red Hat products such as Multicluster Engine for Kubernetes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39883"
},
{
"category": "external",
"summary": "RHBZ#2456718",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456718"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39883",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39883"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39883",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39883"
},
{
"category": "external",
"summary": "http://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0",
"url": "http://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hfvc-g4fc-pqhx",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hfvc-g4fc-pqhx"
}
],
"release_date": "2026-04-08T20:26:41.731000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:05:52+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Arbitrary code execution via PATH hijacking on BSD/Solaris"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:05:52+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54274"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-operator-bundle@sha256:f722fd012aa6bad3c185baa5644bb8087745e04d37a34b925a38575941cff096_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:0e14357c479ca1da780332572ed85f541c5788fde4023358fc67582a442b7323_ppc64le",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:402c93a3cd63e51b3fcadc4bf2491f73063fc15b1332a2475c23511b12416f00_s390x",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:5b3a2a1711dd9c7659308766f28cc8897a8076e0fd729fdf5696395277b6a76b_amd64",
"Red Hat OpenShift Workload Availability 0.8:registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator@sha256:b9a555cb95c6a341759fee277a815c863c3f66d6a611984f9007434698e5ff58_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
}
]
}
RHSA-2026:54283
Vulnerability from csaf_redhat - Published: 2026-08-12 10:18 - Updated: 2026-08-25 19:03Summary
Red Hat Security Advisory: Red Hat OpenShift Workload Availability v5.7.1 security update
Severity
Important
Notes
Topic: This is an updated version of the Node Maintenance Operator.
This Operator is delivered by Red Hat Workload Availability (RHWA).
Details: The Node Maintenance Operator works in conjunction with the machine
health check or the node health check to provide automatic remediation of
unhealthy nodes by rebooting them. This minimizes downtime for stateful
applications and ReadWriteOnce (RWO) Volumes as well as restoring compute
capacity in the event of transient failures.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64 | — |
Workaround
|
Threats
Impact
Important
References
62 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "This is an updated version of the Node Maintenance Operator.\nThis Operator is delivered by Red Hat Workload Availability (RHWA).",
"title": "Topic"
},
{
"category": "general",
"text": "The Node Maintenance Operator works in conjunction with the machine\nhealth check or the node health check to provide automatic remediation of\nunhealthy nodes by rebooting them. This minimizes downtime for stateful\napplications and ReadWriteOnce (RWO) Volumes as well as restoring compute\ncapacity in the event of transient failures.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54283",
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54283.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Workload Availability v5.7.1 security update",
"tracking": {
"current_release_date": "2026-08-25T19:03:16+00:00",
"generator": {
"date": "2026-08-25T19:03:16+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54283",
"initial_release_date": "2026-08-12T10:18:55+00:00",
"revision_history": [
{
"date": "2026-08-12T10:18:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T19:03:16+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Workload Availability 5.7",
"product": {
"name": "Red Hat OpenShift Workload Availability 5.7",
"product_id": "Red Hat OpenShift Workload Availability 5.7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:workload_availability_nmo:5.7::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Workload Availability"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"product_id": "registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"product_identification_helper": {
"purl": "pkg:oci/node-maintenance-operator-bundle@sha256%3A5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/node-maintenance-operator-bundle\u0026tag=1785203987"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64",
"product_id": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64",
"product_identification_helper": {
"purl": "pkg:oci/node-maintenance-rhel9-operator@sha256%3A7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/node-maintenance-rhel9-operator\u0026tag=1785202847"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"product": {
"name": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"product_id": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/node-maintenance-rhel9-operator@sha256%3A4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d?arch=s390x\u0026repository_url=registry.redhat.io/workload-availability/node-maintenance-rhel9-operator\u0026tag=1785202847"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"product": {
"name": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"product_id": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"product_identification_helper": {
"purl": "pkg:oci/node-maintenance-rhel9-operator@sha256%3A62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57?arch=arm64\u0026repository_url=registry.redhat.io/workload-availability/node-maintenance-rhel9-operator\u0026tag=1785202847"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"product": {
"name": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"product_id": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/node-maintenance-rhel9-operator@sha256%3A67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc?arch=ppc64le\u0026repository_url=registry.redhat.io/workload-availability/node-maintenance-rhel9-operator\u0026tag=1785202847"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64 as a component of Red Hat OpenShift Workload Availability 5.7",
"product_id": "Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x as a component of Red Hat OpenShift Workload Availability 5.7",
"product_id": "Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x"
},
"product_reference": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64 as a component of Red Hat OpenShift Workload Availability 5.7",
"product_id": "Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64"
},
"product_reference": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le as a component of Red Hat OpenShift Workload Availability 5.7",
"product_id": "Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le"
},
"product_reference": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 5.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64 as a component of Red Hat OpenShift Workload Availability 5.7",
"product_id": "Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 5.7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:18:55+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:18:55+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:18:55+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:18:55+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:18:55+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:18:55+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:18:55+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54283"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-operator-bundle@sha256:5d9fa0808c900246ef05e51d6de29c48c201c6e8b2e9cdec0f895ecb6ad26c03_amd64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:4f8991fd01de2e5a7e1fd67b4ae76c5ec8e2d39d49a315b770b1515cc959e83d_s390x",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:62f4b3e9b23ff60d3b955c395b5c87d4155fa307d076df7a3b1070e06096bb57_arm64",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:67e3d07fe82432bc0c016163c00b18d1f297f4b98c5fc7c80065404d240c5bfc_ppc64le",
"Red Hat OpenShift Workload Availability 5.7:registry.redhat.io/workload-availability/node-maintenance-rhel9-operator@sha256:7c5a1e475fed819b8c9eac40640f7d9a6dd9ac80f8ddbc5b9bd60dc3efa2ee25_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
}
]
}
RHSA-2026:54284
Vulnerability from csaf_redhat - Published: 2026-08-12 10:19 - Updated: 2026-08-25 19:03Summary
Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.13.1 security update
Severity
Important
Notes
Topic: This is an updated version of the Self Node Remediation Operator.
This Operator is delivered by Red Hat Workload Availability (RHWA).
Details: The Self Node Remediation Operator works in conjunction with the machine
health check or the node health check to provide automatic remediation of
unhealthy nodes by rebooting them. This minimizes downtime for stateful
applications and ReadWriteOnce (RWO) Volumes as well as restoring compute
capacity in the event of transient failures.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64 | — |
Workaround
|
Threats
Impact
Important
References
62 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "This is an updated version of the Self Node Remediation Operator.\nThis Operator is delivered by Red Hat Workload Availability (RHWA).",
"title": "Topic"
},
{
"category": "general",
"text": "The Self Node Remediation Operator works in conjunction with the machine\nhealth check or the node health check to provide automatic remediation of\nunhealthy nodes by rebooting them. This minimizes downtime for stateful\napplications and ReadWriteOnce (RWO) Volumes as well as restoring compute\ncapacity in the event of transient failures.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54284",
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54284.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.13.1 security update",
"tracking": {
"current_release_date": "2026-08-25T19:03:17+00:00",
"generator": {
"date": "2026-08-25T19:03:17+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54284",
"initial_release_date": "2026-08-12T10:19:05+00:00",
"revision_history": [
{
"date": "2026-08-12T10:19:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T19:03:17+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Workload Availability 0.13",
"product": {
"name": "Red Hat OpenShift Workload Availability 0.13",
"product_id": "Red Hat OpenShift Workload Availability 0.13",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:workload_availability_snr:0.13::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Workload Availability"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"product_id": "registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"product_identification_helper": {
"purl": "pkg:oci/self-node-remediation-operator-bundle@sha256%3Ab6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/self-node-remediation-operator-bundle\u0026tag=1785203915"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"product_id": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/self-node-remediation-rhel9-operator@sha256%3A07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator\u0026tag=1785203036"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"product": {
"name": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"product_id": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/self-node-remediation-rhel9-operator@sha256%3A117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d?arch=s390x\u0026repository_url=registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator\u0026tag=1785203036"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"product": {
"name": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"product_id": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/self-node-remediation-rhel9-operator@sha256%3A705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7?arch=arm64\u0026repository_url=registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator\u0026tag=1785203036"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le",
"product": {
"name": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le",
"product_id": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/self-node-remediation-rhel9-operator@sha256%3A87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf?arch=ppc64le\u0026repository_url=registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator\u0026tag=1785203036"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64 as a component of Red Hat OpenShift Workload Availability 0.13",
"product_id": "Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64 as a component of Red Hat OpenShift Workload Availability 0.13",
"product_id": "Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x as a component of Red Hat OpenShift Workload Availability 0.13",
"product_id": "Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x"
},
"product_reference": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64 as a component of Red Hat OpenShift Workload Availability 0.13",
"product_id": "Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64"
},
"product_reference": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le as a component of Red Hat OpenShift Workload Availability 0.13",
"product_id": "Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
},
"product_reference": "registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.13"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:19:05+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:19:05+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:19:05+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:19:05+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:19:05+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:19:05+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:19:05+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54284"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-operator-bundle@sha256:b6ff2ce15359c7ccda7f9fdfa5500d7f01ce240ae9701de5625c31899872ca99_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:07593c5d721545ec74310851bdeb5eb050336273a1164fc452fbc526edd4f5b0_amd64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:117992cdf46fc18f6d50b2fde0d8bdf6b711642242c3c37cca6f548e88f3805d_s390x",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:705512633725cde8afe513597b30acee051db00bf510475b70cf9f312a2a85e7_arm64",
"Red Hat OpenShift Workload Availability 0.13:registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator@sha256:87b7964f08cad9e9e475a2f095c85d08894bcc4fc20203924bcaa933385b34cf_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
}
]
}
RHSA-2026:54285
Vulnerability from csaf_redhat - Published: 2026-08-12 10:20 - Updated: 2026-08-25 19:03Summary
Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.7.1 security update
Severity
Important
Notes
Topic: This is an updated version of the Machine Deletion Remediation Operator.
This Operator is delivered by Red Hat Workload Availability (RHWA).
Details: The Machine Deletion Remediation (MDR) Operator works with the Node Health Check (NHC) Operator to reprovision unhealthy nodes using the Machine API.
The MDR Operator looks for the associated machine of an unhealthy node, and deletes it.
After the machine custom resource (CR) has been deleted, the owning controller creates a replacement machine CR.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64 | — |
Workaround
|
Threats
Impact
Important
References
62 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "This is an updated version of the Machine Deletion Remediation Operator.\nThis Operator is delivered by Red Hat Workload Availability (RHWA).",
"title": "Topic"
},
{
"category": "general",
"text": "The Machine Deletion Remediation (MDR) Operator works with the Node Health Check (NHC) Operator to reprovision unhealthy nodes using the Machine API.\nThe MDR Operator looks for the associated machine of an unhealthy node, and deletes it.\nAfter the machine custom resource (CR) has been deleted, the owning controller creates a replacement machine CR.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54285",
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54285.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.7.1 security update",
"tracking": {
"current_release_date": "2026-08-25T19:03:17+00:00",
"generator": {
"date": "2026-08-25T19:03:17+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54285",
"initial_release_date": "2026-08-12T10:20:41+00:00",
"revision_history": [
{
"date": "2026-08-12T10:20:41+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T19:03:17+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Workload Availability 0.7",
"product": {
"name": "Red Hat OpenShift Workload Availability 0.7",
"product_id": "Red Hat OpenShift Workload Availability 0.7",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:workload_availability_mdr:0.7::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Workload Availability"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"product_id": "registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/machine-deletion-remediation-operator-bundle@sha256%3Ad3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle\u0026tag=1785204661"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"product_id": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/machine-deletion-remediation-rhel9-operator@sha256%3A66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator\u0026tag=1785203508"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"product": {
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"product_id": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"product_identification_helper": {
"purl": "pkg:oci/machine-deletion-remediation-rhel9-operator@sha256%3A2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99?arch=s390x\u0026repository_url=registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator\u0026tag=1785203508"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"product": {
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"product_id": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"product_identification_helper": {
"purl": "pkg:oci/machine-deletion-remediation-rhel9-operator@sha256%3A60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68?arch=arm64\u0026repository_url=registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator\u0026tag=1785203508"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le",
"product": {
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le",
"product_id": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/machine-deletion-remediation-rhel9-operator@sha256%3Ad2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7?arch=ppc64le\u0026repository_url=registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator\u0026tag=1785203508"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64 as a component of Red Hat OpenShift Workload Availability 0.7",
"product_id": "Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x as a component of Red Hat OpenShift Workload Availability 0.7",
"product_id": "Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x"
},
"product_reference": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64 as a component of Red Hat OpenShift Workload Availability 0.7",
"product_id": "Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64"
},
"product_reference": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64 as a component of Red Hat OpenShift Workload Availability 0.7",
"product_id": "Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le as a component of Red Hat OpenShift Workload Availability 0.7",
"product_id": "Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
},
"product_reference": "registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.7"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:41+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:41+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:41+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:41+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:41+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:41+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:41+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54285"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-operator-bundle@sha256:d3ef7d11ec2b62962e8d582587d19dc3295f8265d9bf0b0975742c5d6d810e3d_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:2a0dccb5cc796fe6d02a28571233b584576e2b5874ee958a161d06f0c74d8f99_s390x",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:60f6304080ea8c80b00150595f771a050918789b3d8458db355d656b62891d68_arm64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:66d3d2c1e0074ed2c9a03024a534173208adc3ab615f0b19f12296c1faf2b4aa_amd64",
"Red Hat OpenShift Workload Availability 0.7:registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator@sha256:d2c6bf317539bb5cfae5ecf1467edcccad32f27edfa7f9fbd57314e20ecb23d7_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
}
]
}
RHSA-2026:54286
Vulnerability from csaf_redhat - Published: 2026-08-12 10:20 - Updated: 2026-08-25 19:03Summary
Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.3.1 security update
Severity
Important
Notes
Topic: This is an updated version of the Storage-Based Remediation Operator.
This Operator is delivered by Red Hat Workload Availability (RHWA).
Details: The Storage-Based Remediation Operator is an OLM Operator for managing STONITH Block Device (SBD) configurations and remediations for high-availability clustering.
The operator provides automated node remediation when nodes become unresponsive by leveraging shared block storage for fencing operations.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenTelemetry-Go. On BSD and Solaris platforms, a local attacker could exploit a vulnerability related to the `kenv` command. By manipulating the system's PATH environment variable, an attacker could achieve arbitrary code execution or privilege escalation, leading to a compromise of system integrity and confidentiality.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 | — |
Workaround
|
Threats
Impact
Important
References
75 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "This is an updated version of the Storage-Based Remediation Operator.\nThis Operator is delivered by Red Hat Workload Availability (RHWA).",
"title": "Topic"
},
{
"category": "general",
"text": "The Storage-Based Remediation Operator is an OLM Operator for managing STONITH Block Device (SBD) configurations and remediations for high-availability clustering.\nThe operator provides automated node remediation when nodes become unresponsive by leveraging shared block storage for fencing operations.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54286",
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39883",
"url": "https://access.redhat.com/security/cve/CVE-2026-39883"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54286.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.3.1 security update",
"tracking": {
"current_release_date": "2026-08-25T19:03:18+00:00",
"generator": {
"date": "2026-08-25T19:03:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54286",
"initial_release_date": "2026-08-12T10:20:50+00:00",
"revision_history": [
{
"date": "2026-08-12T10:20:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T19:03:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Workload Availability 0.3",
"product": {
"name": "Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:workload_availability_sbr:0.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Workload Availability"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-agent-rhel9@sha256%3Acf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9\u0026tag=1785203394"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-operator-bundle@sha256%3A264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle\u0026tag=1785204415"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-rhel9-operator@sha256%3A50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator\u0026tag=1785203474"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-agent-rhel9@sha256%3A615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144?arch=s390x\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9\u0026tag=1785203394"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-rhel9-operator@sha256%3A6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394?arch=s390x\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator\u0026tag=1785203474"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-agent-rhel9@sha256%3Aa135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f?arch=arm64\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9\u0026tag=1785203394"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-rhel9-operator@sha256%3A3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611?arch=arm64\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator\u0026tag=1785203474"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-agent-rhel9@sha256%3Addccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36?arch=ppc64le\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9\u0026tag=1785203394"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le",
"product": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le",
"product_id": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/storage-based-remediation-rhel9-operator@sha256%3A7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e?arch=ppc64le\u0026repository_url=registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator\u0026tag=1785203474"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64 as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64 as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64 as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64 as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64 as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le as a component of Red Hat OpenShift Workload Availability 0.3",
"product_id": "Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
},
"product_reference": "registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39883",
"cwe": {
"id": "CWE-426",
"name": "Untrusted Search Path"
},
"discovery_date": "2026-04-08T21:01:31.690577+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456718"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go. On BSD and Solaris platforms, a local attacker could exploit a vulnerability related to the `kenv` command. By manipulating the system\u0027s PATH environment variable, an attacker could achieve arbitrary code execution or privilege escalation, leading to a compromise of system integrity and confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Arbitrary code execution via PATH hijacking on BSD/Solaris",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in OpenTelemetry-Go that allows a local attacker to achieve arbitrary code execution or privilege escalation through PATH hijacking. This vulnerability is specific to BSD and Solaris platforms due to the use of the `kenv` command and does not directly affect Red Hat Enterprise Linux environments. However, the vulnerable component is included in Red Hat products such as Multicluster Engine for Kubernetes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39883"
},
{
"category": "external",
"summary": "RHBZ#2456718",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456718"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39883",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39883"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39883",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39883"
},
{
"category": "external",
"summary": "http://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0",
"url": "http://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hfvc-g4fc-pqhx",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hfvc-g4fc-pqhx"
}
],
"release_date": "2026-04-08T20:26:41.731000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Arbitrary code execution via PATH hijacking on BSD/Solaris"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:20:50+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54286"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:615742b426e6685458a74d1d70542c2b6cacbddbc54579c57ea8722723214144_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:a135778609e2e6724cf2acdd147d42a4d42f098d6a02b383210705294e396e6f_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:cf75a72c8b4ec1972529dd273879f989e40e12a05cdf6b04c23997c0940531c4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-agent-rhel9@sha256:ddccb1cd4cb2c76339790ea62da7b131be252b5cbc43c9f099c18f11680d7a36_ppc64le",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-operator-bundle@sha256:264d76e41258bd9c6b9b9b166a2201270953032f05f72cd53243d80b5297e8a4_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:3721ffeb4a0ee48d815c562d21905d395fe72c3c0db0902a842f8da1d3dd4611_arm64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:50d682d3dcefeedb5d197bd9cabad1cab8e70b01312c91f74de039f0da823d07_amd64",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:6928d66e8b19b71eacacfb755f73f4f8e349c086f9828d33508aa34eccc92394_s390x",
"Red Hat OpenShift Workload Availability 0.3:registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator@sha256:7e1b666f19ef988fcfd97bbcee482c6494bf91ca712a0893027ac4f66da9111e_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
}
]
}
RHSA-2026:54287
Vulnerability from csaf_redhat - Published: 2026-08-12 10:22 - Updated: 2026-08-25 19:03Summary
Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.12.1 security update
Severity
Important
Notes
Topic: This is an updated version of the Node Health Check Operator.
This Operator is delivered by Red Hat Workload Availability (RHWA).
Details: The Node Health Check Operator deploys the Node Health Check controller.
The controller identifies unhealthy nodes and uses a remediation provider
to remediate the unhealthy nodes. You can install either the
Self Node Remediation Operator, the Fence Agents Remediation Operator,
or the Machine Deletion Remedation Operator as a remediation provider.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 | — |
Workaround
|
Threats
Impact
Important
References
62 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "This is an updated version of the Node Health Check Operator.\nThis Operator is delivered by Red Hat Workload Availability (RHWA).",
"title": "Topic"
},
{
"category": "general",
"text": "The Node Health Check Operator deploys the Node Health Check controller.\nThe controller identifies unhealthy nodes and uses a remediation provider\nto remediate the unhealthy nodes. You can install either the\nSelf Node Remediation Operator, the Fence Agents Remediation Operator,\nor the Machine Deletion Remedation Operator as a remediation provider.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54287",
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33814",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54287.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Workload Availability Operator v0.12.1 security update",
"tracking": {
"current_release_date": "2026-08-25T19:03:18+00:00",
"generator": {
"date": "2026-08-25T19:03:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54287",
"initial_release_date": "2026-08-12T10:22:06+00:00",
"revision_history": [
{
"date": "2026-08-12T10:22:06+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T19:03:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Workload Availability 0.12",
"product": {
"name": "Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:workload_availability_nhc:0.12::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Workload Availability"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-operator-bundle@sha256%3A4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-operator-bundle\u0026tag=1785203783"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64",
"product_id": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/node-remediation-console-rhel9@sha256%3Adbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/node-remediation-console-rhel9\u0026tag=1785117460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-must-gather-rhel9@sha256%3A07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9\u0026tag=1784971679"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-rhel9-operator@sha256%3A6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64?arch=amd64\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator\u0026tag=1785202723"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"product": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"product_id": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"product_identification_helper": {
"purl": "pkg:oci/node-remediation-console-rhel9@sha256%3A0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311?arch=s390x\u0026repository_url=registry.redhat.io/workload-availability/node-remediation-console-rhel9\u0026tag=1785117460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-must-gather-rhel9@sha256%3Ab5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe?arch=s390x\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9\u0026tag=1784971679"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-rhel9-operator@sha256%3Ad548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5?arch=s390x\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator\u0026tag=1785202723"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"product": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"product_id": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"product_identification_helper": {
"purl": "pkg:oci/node-remediation-console-rhel9@sha256%3A2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa?arch=arm64\u0026repository_url=registry.redhat.io/workload-availability/node-remediation-console-rhel9\u0026tag=1785117460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-must-gather-rhel9@sha256%3Ab906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d?arch=arm64\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9\u0026tag=1784971679"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-rhel9-operator@sha256%3A82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45?arch=arm64\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator\u0026tag=1785202723"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"product": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"product_id": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/node-remediation-console-rhel9@sha256%3A5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b?arch=ppc64le\u0026repository_url=registry.redhat.io/workload-availability/node-remediation-console-rhel9\u0026tag=1785117460"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-must-gather-rhel9@sha256%3Aee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79?arch=ppc64le\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9\u0026tag=1784971679"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"product": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"product_id": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/node-healthcheck-rhel9-operator@sha256%3Aae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97?arch=ppc64le\u0026repository_url=registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator\u0026tag=1785202723"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64 as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64 as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64 as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64 as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64 as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
},
"product_reference": "registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x"
},
"product_reference": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64 as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64"
},
"product_reference": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le"
},
"product_reference": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64 as a component of Red Hat OpenShift Workload Availability 0.12",
"product_id": "Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
},
"product_reference": "registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64",
"relates_to_product_reference": "Red Hat OpenShift Workload Availability 0.12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:22:06+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:22:06+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:22:06+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:22:06+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:22:06+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:22:06+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T10:22:06+00:00",
"details": "For more information on the RHWA 4.22-0 release, see https://docs.redhat.com/en/documentation/workload_availability_for_red_hat_openshift/4.22-0",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54287"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:07a04832975f5740a8d36db33e304d34f4e38a870788de05112a5c31505d148e_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b5355c3c85d9e34f22a46bb3f190bd2bfcb4f27109858010c80539c6fbeccdbe_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:b906c8de5f631902847740e7ac105b74c80ab488868fde7d750dff5881ea8e5d_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-must-gather-rhel9@sha256:ee2f7805d99ed025739bf2187649f0171c263baa0d844fe652d68b441d6dcd79_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-operator-bundle@sha256:4214978132ffd6f9d840e2be8df4e9b85cf13d2740ba4f82fbe72f3d93d6dee5_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:6ece0ac34989350e9be7613fc533767af9ad7bf9544bad6ad297dcece2b6ca64_amd64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:82081eb65c0d359b5d4895e72ef21955a7703a533d2a39a74e0084d398807a45_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:ae120a374dbc2935cd270351ead5a944e84fb305c704df8f41d72e32d69fbd97_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator@sha256:d548561809fc5d0423fa4dfde0a906b986170f16262c47077e1a6e6889c5d5a5_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:0b237c4474bb9a64a70308f35a0645fecb20efa27d63e706b27ca091d255b311_s390x",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:2ed8b109c7ffb6821590ec0b554f894b7c714c1b9632be260818f7178daf7baa_arm64",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:5e0f6c04a44a3050869c00524f214bfd72ca34aadbf71b80f0d12cc3022d4f2b_ppc64le",
"Red Hat OpenShift Workload Availability 0.12:registry.redhat.io/workload-availability/node-remediation-console-rhel9@sha256:dbdf7d0d139bdd2661a486493805540cd6e9277aaadbde7a1414ccdc157a20e5_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
}
]
}
RHSA-2026:54531
Vulnerability from csaf_redhat - Published: 2026-08-13 10:51 - Updated: 2026-08-25 19:03Summary
Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.1
Severity
Important
Notes
Topic: cert-manager Operator for Red Hat OpenShift 1.19.1
Details: The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities
and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide
certificates-as-a-service to developers working within your Kubernetes cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — | ||
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — | ||
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — | ||
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
111 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "cert-manager Operator for Red Hat OpenShift 1.19.1",
"title": "Topic"
},
{
"category": "general",
"text": "The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities\nand certificates as first-class resource types in the Kubernetes API. This makes it possible to provide\ncertificates-as-a-service to developers working within your Kubernetes cluster.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54531",
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html",
"url": "https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54531.json"
}
],
"title": "Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.1",
"tracking": {
"current_release_date": "2026-08-25T19:03:32+00:00",
"generator": {
"date": "2026-08-25T19:03:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54531",
"initial_release_date": "2026-08-13T10:51:40+00:00",
"revision_history": [
{
"date": "2026-08-13T10:51:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-22T06:15:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T19:03:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Cert Manager support for Red Hat OpenShift release 1.19",
"product": {
"name": "Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:cert_manager:1.19::el9"
}
}
}
],
"category": "product_family",
"name": "Cert Manager support for Red Hat OpenShift release"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-rhel9@sha256%3A82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2?arch=amd64\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9\u0026tag=1786613805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3A0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2?arch=amd64\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9\u0026tag=1786613805"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-rhel9@sha256%3A6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd?arch=s390x\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9\u0026tag=1786613805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3Ab574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3?arch=s390x\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9\u0026tag=1786613805"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-rhel9@sha256%3A60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da?arch=ppc64le\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9\u0026tag=1786613805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3Aa16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6?arch=ppc64le\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9\u0026tag=1786613805"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-rhel9@sha256%3A79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4?arch=arm64\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9\u0026tag=1786613805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3A5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90?arch=arm64\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9\u0026tag=1786613805"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
RHSA-2026:54552
Vulnerability from csaf_redhat - Published: 2026-08-19 15:44 - Updated: 2026-08-25 19:03Summary
Red Hat Security Advisory: OpenShift Container Platform 4.19.43 packages and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.19.43 is now available with
updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container
Platform 4.19.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container
Platform 4.19.43. See the following advisory for the container images for
this release:
https://access.redhat.com/errata/RHSA-2026:54555
Security Fix(es):
* net: golang: Go net package: Denial of Service via long CNAME response in
LookupCNAME (CVE-2026-33811)
* net/mail: golang: Go net/mail: Denial of Service via crafted email inputs
(CVE-2026-39820)
* net/mail: golang: net/mail: Denial of Service via pathological email
address parsing (CVE-2026-42499)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.19 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
51 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
51 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
51 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64 | — |
Workaround
|
Threats
Impact
Important
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.19.43 is now available with\nupdates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container\nPlatform 4.19.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing\nKubernetes application platform solution designed for on-premise or private\ncloud deployments.\n\nThis advisory contains the RPM packages for Red Hat OpenShift Container\nPlatform 4.19.43. See the following advisory for the container images for\nthis release:\n\nhttps://access.redhat.com/errata/RHSA-2026:54555\n\nSecurity Fix(es):\n\n* net: golang: Go net package: Denial of Service via long CNAME response in\nLookupCNAME (CVE-2026-33811)\n* net/mail: golang: Go net/mail: Denial of Service via crafted email inputs\n(CVE-2026-39820)\n* net/mail: golang: net/mail: Denial of Service via pathological email\naddress parsing (CVE-2026-42499)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these\nupdated packages and images when they are available in the appropriate\nrelease channel. To check for available updates, use the OpenShift CLI (oc)\nor web console. Instructions for upgrading a cluster are available at\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54552",
"url": "https://access.redhat.com/errata/RHSA-2026:54552"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54552.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.19.43 packages and security update",
"tracking": {
"current_release_date": "2026-08-25T19:03:28+00:00",
"generator": {
"date": "2026-08-25T19:03:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54552",
"initial_release_date": "2026-08-19T15:44:45+00:00",
"revision_history": [
{
"date": "2026-08-19T15:44:45+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-19T15:44:45+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-25T19:03:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.19",
"product": {
"name": "Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.19::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.19",
"product": {
"name": "Red Hat OpenShift Container Platform 4.19",
"product_id": "8Base-RHOSE-4.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.19::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"product": {
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"product_id": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.32.13-9.rhaos4.19.git2100f27.el9?arch=src"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.32.0-6.el9.src",
"product": {
"name": "cri-tools-0:1.32.0-6.el9.src",
"product_id": "cri-tools-0:1.32.0-6.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.32.0-6.el9?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"product": {
"name": "openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"product_id": "openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=src"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"product": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"product_id": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9?arch=src"
}
}
},
{
"category": "product_version",
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"product": {
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"product_id": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ose-aws-ecr-image-credential-provider@4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9?arch=src"
}
}
},
{
"category": "product_version",
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"product": {
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"product_id": "skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.18.1-7.rhaos4.19.el9?arch=src\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"product": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"product_id": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"product": {
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"product_id": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.32.13-9.rhaos4.19.git2100f27.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"product": {
"name": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"product_id": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.32.13-9.rhaos4.19.git2100f27.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"product": {
"name": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"product_id": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.32.13-9.rhaos4.19.git2100f27.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.32.0-6.el9.x86_64",
"product": {
"name": "cri-tools-0:1.32.0-6.el9.x86_64",
"product_id": "cri-tools-0:1.32.0-6.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.32.0-6.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"product": {
"name": "cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"product_id": "cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debugsource@1.32.0-6.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"product": {
"name": "cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"product_id": "cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debuginfo@1.32.0-6.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product": {
"name": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product_id": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-hyperkube@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product": {
"name": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product_id": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kube-apiserver@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product": {
"name": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product_id": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kube-controller-manager@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product": {
"name": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product_id": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kube-scheduler@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product": {
"name": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product_id": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kubelet@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"product": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"product_id": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"product": {
"name": "openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"product_id": "openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients-redistributable@4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64",
"product": {
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64",
"product_id": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ose-aws-ecr-image-credential-provider@4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"product": {
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"product_id": "skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.18.1-7.rhaos4.19.el9?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64",
"product": {
"name": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64",
"product_id": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-tests@1.18.1-7.rhaos4.19.el9?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"product": {
"name": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"product_id": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debugsource@1.18.1-7.rhaos4.19.el9?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"product": {
"name": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"product_id": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debuginfo@1.18.1-7.rhaos4.19.el9?arch=x86_64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"product": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"product_id": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"product": {
"name": "openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"product_id": "openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients-redistributable@4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"product": {
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"product_id": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.32.13-9.rhaos4.19.git2100f27.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"product": {
"name": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"product_id": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.32.13-9.rhaos4.19.git2100f27.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"product": {
"name": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"product_id": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.32.13-9.rhaos4.19.git2100f27.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.32.0-6.el9.aarch64",
"product": {
"name": "cri-tools-0:1.32.0-6.el9.aarch64",
"product_id": "cri-tools-0:1.32.0-6.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.32.0-6.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"product": {
"name": "cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"product_id": "cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debugsource@1.32.0-6.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"product": {
"name": "cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"product_id": "cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debuginfo@1.32.0-6.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product": {
"name": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product_id": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-hyperkube@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product": {
"name": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product_id": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kube-apiserver@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product": {
"name": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product_id": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kube-controller-manager@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product": {
"name": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product_id": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kube-scheduler@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product": {
"name": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product_id": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kubelet@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"product": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"product_id": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"product": {
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"product_id": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ose-aws-ecr-image-credential-provider@4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"product": {
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"product_id": "skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.18.1-7.rhaos4.19.el9?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"product": {
"name": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"product_id": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-tests@1.18.1-7.rhaos4.19.el9?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"product": {
"name": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"product_id": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debugsource@1.18.1-7.rhaos4.19.el9?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"product": {
"name": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"product_id": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debuginfo@1.18.1-7.rhaos4.19.el9?arch=aarch64\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"product": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"product_id": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"product": {
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"product_id": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.32.13-9.rhaos4.19.git2100f27.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"product": {
"name": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"product_id": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.32.13-9.rhaos4.19.git2100f27.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"product": {
"name": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"product_id": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.32.13-9.rhaos4.19.git2100f27.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.32.0-6.el9.ppc64le",
"product": {
"name": "cri-tools-0:1.32.0-6.el9.ppc64le",
"product_id": "cri-tools-0:1.32.0-6.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.32.0-6.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"product": {
"name": "cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"product_id": "cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debugsource@1.32.0-6.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"product": {
"name": "cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"product_id": "cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debuginfo@1.32.0-6.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product": {
"name": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product_id": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-hyperkube@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product": {
"name": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product_id": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kube-apiserver@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product": {
"name": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product_id": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kube-controller-manager@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product": {
"name": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product_id": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kube-scheduler@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product": {
"name": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product_id": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kubelet@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"product": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"product_id": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"product": {
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"product_id": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ose-aws-ecr-image-credential-provider@4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"product": {
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"product_id": "skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.18.1-7.rhaos4.19.el9?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"product": {
"name": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"product_id": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-tests@1.18.1-7.rhaos4.19.el9?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"product": {
"name": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"product_id": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debugsource@1.18.1-7.rhaos4.19.el9?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"product": {
"name": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"product_id": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debuginfo@1.18.1-7.rhaos4.19.el9?arch=ppc64le\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"product": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"product_id": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"product": {
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"product_id": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o@1.32.13-9.rhaos4.19.git2100f27.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"product": {
"name": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"product_id": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debugsource@1.32.13-9.rhaos4.19.git2100f27.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"product": {
"name": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"product_id": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-o-debuginfo@1.32.13-9.rhaos4.19.git2100f27.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-tools-0:1.32.0-6.el9.s390x",
"product": {
"name": "cri-tools-0:1.32.0-6.el9.s390x",
"product_id": "cri-tools-0:1.32.0-6.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools@1.32.0-6.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"product": {
"name": "cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"product_id": "cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debugsource@1.32.0-6.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"product": {
"name": "cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"product_id": "cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/cri-tools-debuginfo@1.32.0-6.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product": {
"name": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product_id": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-hyperkube@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product": {
"name": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product_id": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kube-apiserver@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product": {
"name": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product_id": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kube-controller-manager@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product": {
"name": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product_id": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kube-scheduler@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product": {
"name": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product_id": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-kubelet@4.19.0-202608111604.p2.g63adf01.assembly.stream.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"product": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"product_id": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"product": {
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"product_id": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ose-aws-ecr-image-credential-provider@4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"product": {
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"product_id": "skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo@1.18.1-7.rhaos4.19.el9?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"product": {
"name": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"product_id": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-tests@1.18.1-7.rhaos4.19.el9?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"product": {
"name": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"product_id": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debugsource@1.18.1-7.rhaos4.19.el9?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"product": {
"name": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"product_id": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/skopeo-debuginfo@1.18.1-7.rhaos4.19.el9?arch=s390x\u0026epoch=2"
}
}
},
{
"category": "product_version",
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"product": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"product_id": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openshift-clients@4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64"
},
"product_reference": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"relates_to_product_reference": "8Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le"
},
"product_reference": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"relates_to_product_reference": "8Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x"
},
"product_reference": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"relates_to_product_reference": "8Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src"
},
"product_reference": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"relates_to_product_reference": "8Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64"
},
"product_reference": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64"
},
"product_reference": "openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"relates_to_product_reference": "8Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64"
},
"product_reference": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le"
},
"product_reference": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x"
},
"product_reference": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src"
},
"product_reference": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64"
},
"product_reference": "cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64"
},
"product_reference": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le"
},
"product_reference": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x"
},
"product_reference": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64"
},
"product_reference": "cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64"
},
"product_reference": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le"
},
"product_reference": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x"
},
"product_reference": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64"
},
"product_reference": "cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.32.0-6.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64"
},
"product_reference": "cri-tools-0:1.32.0-6.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.32.0-6.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le"
},
"product_reference": "cri-tools-0:1.32.0-6.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.32.0-6.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x"
},
"product_reference": "cri-tools-0:1.32.0-6.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.32.0-6.el9.src as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src"
},
"product_reference": "cri-tools-0:1.32.0-6.el9.src",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-0:1.32.0-6.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64"
},
"product_reference": "cri-tools-0:1.32.0-6.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debuginfo-0:1.32.0-6.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64"
},
"product_reference": "cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le"
},
"product_reference": "cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debuginfo-0:1.32.0-6.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x"
},
"product_reference": "cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debuginfo-0:1.32.0-6.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64"
},
"product_reference": "cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debugsource-0:1.32.0-6.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64"
},
"product_reference": "cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debugsource-0:1.32.0-6.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le"
},
"product_reference": "cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debugsource-0:1.32.0-6.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x"
},
"product_reference": "cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cri-tools-debugsource-0:1.32.0-6.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64"
},
"product_reference": "cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src"
},
"product_reference": "openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64"
},
"product_reference": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le"
},
"product_reference": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x"
},
"product_reference": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src"
},
"product_reference": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64"
},
"product_reference": "openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64"
},
"product_reference": "openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64"
},
"product_reference": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le"
},
"product_reference": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x"
},
"product_reference": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64"
},
"product_reference": "openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64"
},
"product_reference": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le"
},
"product_reference": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x"
},
"product_reference": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64"
},
"product_reference": "openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64"
},
"product_reference": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le"
},
"product_reference": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x"
},
"product_reference": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64"
},
"product_reference": "openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64"
},
"product_reference": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le"
},
"product_reference": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x"
},
"product_reference": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64"
},
"product_reference": "openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64"
},
"product_reference": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le"
},
"product_reference": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x"
},
"product_reference": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64"
},
"product_reference": "openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64"
},
"product_reference": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le"
},
"product_reference": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x"
},
"product_reference": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src"
},
"product_reference": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64"
},
"product_reference": "ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64"
},
"product_reference": "skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le"
},
"product_reference": "skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x"
},
"product_reference": "skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.src as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src"
},
"product_reference": "skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64"
},
"product_reference": "skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64"
},
"product_reference": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le"
},
"product_reference": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x"
},
"product_reference": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64"
},
"product_reference": "skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64"
},
"product_reference": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le"
},
"product_reference": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x"
},
"product_reference": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64"
},
"product_reference": "skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64"
},
"product_reference": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le"
},
"product_reference": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x"
},
"product_reference": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64"
},
"product_reference": "skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64",
"relates_to_product_reference": "9Base-RHOSE-4.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64"
],
"known_not_affected": [
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T15:44:45+00:00",
"details": "For OpenShift Container Platform 4.19 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/",
"product_ids": [
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54552"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64"
],
"known_not_affected": [
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T15:44:45+00:00",
"details": "For OpenShift Container Platform 4.19 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/",
"product_ids": [
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54552"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64"
],
"known_not_affected": [
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-19T15:44:45+00:00",
"details": "For OpenShift Container Platform 4.19 see the following documentation,\nwhich will be updated shortly for this release, for important instructions\non how to upgrade your cluster and fully apply this asynchronous errata\nupdate:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/",
"product_ids": [
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54552"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.aarch64",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.ppc64le",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.s390x",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.src",
"8Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"8Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8.x86_64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.src",
"9Base-RHOSE-4.19:cri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debuginfo-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.aarch64",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.ppc64le",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.s390x",
"9Base-RHOSE-4.19:cri-o-debugsource-0:1.32.13-9.rhaos4.19.git2100f27.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.src",
"9Base-RHOSE-4.19:cri-tools-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debuginfo-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.aarch64",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.ppc64le",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.s390x",
"9Base-RHOSE-4.19:cri-tools-debugsource-0:1.32.0-6.el9.x86_64",
"9Base-RHOSE-4.19:openshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.src",
"9Base-RHOSE-4.19:openshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-clients-redistributable-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-hyperkube-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-apiserver-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-controller-manager-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kube-scheduler-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:openshift-kubelet-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.aarch64",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.ppc64le",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.s390x",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.src",
"9Base-RHOSE-4.19:ose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.src",
"9Base-RHOSE-4.19:skopeo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debuginfo-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-debugsource-2:1.18.1-7.rhaos4.19.el9.x86_64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.aarch64",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.ppc64le",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.s390x",
"9Base-RHOSE-4.19:skopeo-tests-2:1.18.1-7.rhaos4.19.el9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…