RHSA-2026:68349
Vulnerability from csaf_redhat - Published: 2026-09-16 17:49 - Updated: 2026-09-21 22:28Summary
Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.13
Severity
Important
Notes
Topic: Logging for Red Hat OpenShift - 6.2.13
Details: Red Hat OpenShift Logging 6.2.13 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service (DoS), making the BuildKit service unavailable.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in aws-smithy-json. This vulnerability allows a remote, unauthenticated attacker to cause a denial of service (DoS) in smithy-rs generated servers. By sending a small HTTP request containing deeply nested JSON, the attacker can trigger uncontrolled recursion in the aws-smithy-json runtime, leading to stack exhaustion and a process abort. This can make the affected server unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenTelemetry-Go, the Go implementation of OpenTelemetry. A remote attacker can exploit this vulnerability by sending multiple 'baggage' header lines. The system's independent parsing and aggregation of each header field-value across multiple values can lead to amplified CPU and memory allocations, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-15792
Known not affected
30 products, the same list as for
CVE-2026-15792
Threats
Impact
Important
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-32283
Known not affected
30 products, the same list as for
CVE-2026-32283
Threats
Impact
Important
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2026-15792
Known not affected
30 products, the same list as for
CVE-2026-15792
Threats
Impact
Important
A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le | — |
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2026-15792
Known not affected
30 products, the same list as for
CVE-2026-15792
Threats
Impact
Moderate
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-32283
Known not affected
30 products, the same list as for
CVE-2026-32283
Threats
Impact
Important
A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-32283
Known not affected
30 products, the same list as for
CVE-2026-32283
Threats
Impact
Important
A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.
8.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-32283
Known not affected
30 products, the same list as for
CVE-2026-32283
Threats
Impact
Important
A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-32283
Known not affected
30 products, the same list as for
CVE-2026-32283
Threats
Impact
Important
A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-32283
Known not affected
30 products, the same list as for
CVE-2026-32283
Threats
Impact
Important
A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-32283
Known not affected
30 products, the same list as for
CVE-2026-32283
Threats
Impact
Important
References
110 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Logging for Red Hat OpenShift - 6.2.13",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Logging 6.2.13 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:68349",
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15792",
"url": "https://access.redhat.com/security/cve/CVE-2026-15792"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-18140",
"url": "https://access.redhat.com/security/cve/CVE-2026-18140"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29181",
"url": "https://access.redhat.com/security/cve/CVE-2026-29181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
"url": "https://access.redhat.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-35469",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
"url": "https://access.redhat.com/security/cve/CVE-2026-56852"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
"url": "https://access.redhat.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
"url": "https://access.redhat.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_68349.json"
}
],
"title": "Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.13",
"tracking": {
"current_release_date": "2026-09-21T22:28:10+00:00",
"generator": {
"date": "2026-09-21T22:28:10+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:68349",
"initial_release_date": "2026-09-16T17:49:50+00:00",
"revision_history": [
{
"date": "2026-09-16T17:49:50+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-16T17:49:54+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-21T22:28:10+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Logging Subsystem for Red Hat OpenShift 6.2",
"product": {
"name": "Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:logging:6.2::el9"
}
}
}
],
"category": "product_family",
"name": "Logging Subsystem for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1789050399"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-operator-bundle@sha256%3Ab615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=1789053071"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1789050399"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Ae9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1789050407"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1789050556"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1789050212"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-operator-bundle@sha256%3Ac20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=1789053077"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1789050242"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Aa9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1789050227"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3Aa1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1789050538"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1789050399"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3Aca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1789050399"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1789050407"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3Af9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1789050556"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1789050212"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Ab9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1789050242"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Ac5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1789050227"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3Ab9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1789050538"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Ab261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1789050399"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3Aa0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1789050399"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1789050407"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1789050556"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3Ad69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1789050212"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Aa128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1789050242"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1789050227"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3Aed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1789050538"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1789050399"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1789050399"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Aa87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1789050407"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3Ae64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1789050556"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1789050212"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1789050242"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1789050227"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3Aaa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1789050538"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.2",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-15792",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-07-21T17:01:51.555730+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2503746"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service (DoS), making the BuildKit service unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "BuildKit is used by several Red Hat products to build container images. This issue allows a malicious BuildKit frontend or client to cause the BuildKit build process to crash. Exploiting this issue requires the ability to supply a build definition (for example, a Dockerfile specifying a custom #syntax frontend) to a BuildKit-based build; it does not allow remote code execution or exposure of data. The issue is fixed upstream in BuildKit version 0.31.2. Red Hat Hardened Images (Buildah, Podman, and Trivy) has already shipped the fixed version. Other affected Red Hat products are being assessed and will ship the fixed version of BuildKit in upcoming releases.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15792"
},
{
"category": "external",
"summary": "RHBZ#2503746",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503746"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15792",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15792"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15792",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15792"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6"
}
],
"release_date": "2026-07-21T16:10:21.395000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-16T17:49:50+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
},
{
"category": "workaround",
"details": "Avoid building container images using BuildKit frontends from untrusted sources. A BuildKit frontend is typically specified using a \"# syntax\" directive at the top of a Dockerfile, or with the \"--frontend\" option to the \"buildctl build\" command. Only use frontend images that come from a trusted source.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request"
},
{
"cve": "CVE-2026-18140",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-07-30T19:01:57.203369+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2509566"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aws-smithy-json. This vulnerability allows a remote, unauthenticated attacker to cause a denial of service (DoS) in smithy-rs generated servers. By sending a small HTTP request containing deeply nested JSON, the attacker can trigger uncontrolled recursion in the aws-smithy-json runtime, leading to stack exhaustion and a process abort. This can make the affected server unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aws-smithy-json: aws-smithy-json: Denial of Service via uncontrolled recursion with deeply nested JSON",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in the `aws-smithy-json` runtime crate allows a remote unauthenticated attacker to trigger a denial of service by sending a crafted HTTP request with deeply nested JSON. Red Hat products utilizing `smithy-rs` generated servers, such as components in Red Hat Enterprise Linux and Red Hat Trusted Artifact Signer, are susceptible to service disruption if exposed to untrusted networks.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18140"
},
{
"category": "external",
"summary": "RHBZ#2509566",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509566"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18140",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18140"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18140",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18140"
},
{
"category": "external",
"summary": "https://aws.amazon.com/security/security-bulletins/2026-067-aws/",
"url": "https://aws.amazon.com/security/security-bulletins/2026-067-aws/"
},
{
"category": "external",
"summary": "https://crates.io/crates/aws-smithy-json/0.62.7",
"url": "https://crates.io/crates/aws-smithy-json/0.62.7"
},
{
"category": "external",
"summary": "https://github.com/smithy-lang/smithy-rs/security/advisories/GHSA-8ffr-xgwf-xj56",
"url": "https://github.com/smithy-lang/smithy-rs/security/advisories/GHSA-8ffr-xgwf-xj56"
}
],
"release_date": "2026-07-30T18:34:04.099000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-16T17:49:50+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
},
{
"category": "workaround",
"details": "Restrict network access to services that process JSON input using the `aws-smithy-json` runtime. Configure firewalls to limit incoming connections to trusted sources, thereby reducing the exposure to remote unauthenticated denial of service attacks. If the service is reloaded or restarted, ensure firewall rules persist.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aws-smithy-json: aws-smithy-json: Denial of Service via uncontrolled recursion with deeply nested JSON"
},
{
"cve": "CVE-2026-29181",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-07T21:01:21.484468+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456252"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go, the Go implementation of OpenTelemetry. A remote attacker can exploit this vulnerability by sending multiple \u0027baggage\u0027 header lines. The system\u0027s independent parsing and aggregation of each header field-value across multiple values can lead to amplified CPU and memory allocations, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting Red Hat Multicluster Engine for Kubernetes. A remote attacker can exploit this flaw by sending multiple crafted `baggage` HTTP header lines, leading to excessive CPU and memory consumption and potentially rendering services unavailable. This impact is significant due to the potential for widespread disruption in a multi-cluster environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29181"
},
{
"category": "external",
"summary": "RHBZ#2456252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456252"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29181"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-mh2q-q3fh-2475",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-mh2q-q3fh-2475"
}
],
"release_date": "2026-04-07T20:29:13.933000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-16T17:49:50+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-16T17:49:50+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33818",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-08-13T22:12:37.151735+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "RHBZ#2515815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
},
{
"category": "external",
"summary": "https://go.dev/cl/814980",
"url": "https://go.dev/cl/814980"
},
{
"category": "external",
"summary": "https://go.dev/issue/80405",
"url": "https://go.dev/issue/80405"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5972",
"url": "https://pkg.go.dev/vuln/GO-2026-5972"
}
],
"release_date": "2026-08-13T21:58:52.821000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-16T17:49:50+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
},
{
"cve": "CVE-2026-35469",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-13T03:52:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457729"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "RHBZ#2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
}
],
"release_date": "2026-04-13T23:59:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-16T17:49:50+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
},
{
"category": "workaround",
"details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
},
{
"cve": "CVE-2026-41178",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-04T16:01:10.300537+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484830"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "RHBZ#2484830",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
"url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
}
],
"release_date": "2026-06-04T14:38:23.707000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-16T17:49:50+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-16T17:49:50+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
},
{
"cve": "CVE-2026-56852",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-21T20:01:56.266823+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504233"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56852"
},
{
"category": "external",
"summary": "RHBZ#2504233",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
},
{
"category": "external",
"summary": "https://go.dev/cl/794100",
"url": "https://go.dev/cl/794100"
},
{
"category": "external",
"summary": "https://go.dev/issue/80142",
"url": "https://go.dev/issue/80142"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5970",
"url": "https://pkg.go.dev/vuln/GO-2026-5970"
}
],
"release_date": "2026-07-21T19:18:59.951000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-16T17:49:50+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
},
{
"cve": "CVE-2026-56853",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:14:53.561638+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515827"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "RHBZ#2515827",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
},
{
"category": "external",
"summary": "https://go.dev/cl/795540",
"url": "https://go.dev/cl/795540"
},
{
"category": "external",
"summary": "https://go.dev/issue/80205",
"url": "https://go.dev/issue/80205"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6089",
"url": "https://pkg.go.dev/vuln/GO-2026-6089"
}
],
"release_date": "2026-08-13T21:58:53.092000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-16T17:49:50+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
},
{
"cve": "CVE-2026-56858",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-08-13T22:16:32.034590+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515838"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "RHBZ#2515838",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://go.dev/cl/807100",
"url": "https://go.dev/cl/807100"
},
{
"category": "external",
"summary": "https://go.dev/issue/80435",
"url": "https://go.dev/issue/80435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6091",
"url": "https://pkg.go.dev/vuln/GO-2026-6091"
}
],
"release_date": "2026-08-13T21:58:53.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-16T17:49:50+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
},
{
"cve": "CVE-2026-56859",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-08-13T22:16:52.493058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515840"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "RHBZ#2515840",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://go.dev/cl/803320",
"url": "https://go.dev/cl/803320"
},
{
"category": "external",
"summary": "https://go.dev/issue/80481",
"url": "https://go.dev/issue/80481"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6088",
"url": "https://pkg.go.dev/vuln/GO-2026-6088"
}
],
"release_date": "2026-08-13T21:58:52.959000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-16T17:49:50+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
},
{
"cve": "CVE-2026-56860",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:13:18.319384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "RHBZ#2515820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://go.dev/cl/803681",
"url": "https://go.dev/cl/803681"
},
{
"category": "external",
"summary": "https://go.dev/issue/80494",
"url": "https://go.dev/issue/80494"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6218",
"url": "https://pkg.go.dev/vuln/GO-2026-6218"
}
],
"release_date": "2026-08-13T21:58:53.731000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-16T17:49:50+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
},
{
"cve": "CVE-2026-56862",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-08-13T22:16:41.928450+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515839"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "RHBZ#2515839",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
},
{
"category": "external",
"summary": "https://go.dev/cl/804261",
"url": "https://go.dev/cl/804261"
},
{
"category": "external",
"summary": "https://go.dev/issue/80528",
"url": "https://go.dev/issue/80528"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6090",
"url": "https://pkg.go.dev/vuln/GO-2026-6090"
}
],
"release_date": "2026-08-13T21:58:53.216000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-16T17:49:50+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/ocp-4-18-release-notes\n\nFor Red Hat OpenShift Logging 6.2, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.2",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:68349"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b615929af35407d22bd2a8086e34a453231a13f53dda1d8431205b6706de1806_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:5790b96e2de8694ca3054313adf751916153fd5033d89c044730192393994368_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:8320d9de314347663fe90dd44aa772a966587d0b79dc89b5073183229e511ac2_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:9ff71e687f732a6fbf78729c35185db7e7b046c44d70a279d90539a5af9c1788_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:b261790cddf3c68ac11003d7e1396746552dce36ce88bddd0471cd1002238644_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:818c336dda928828f9f9a88aa96367cf7b6831e07baf5d6b3b966616788e9211_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:992fa8271d37bba6c7219084c4b7733cabe378767ab2f09626b8aba0d121022c_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a0c1798159c5314af281d5732dff9fac3861f9a60d28518e1cfd9131a86bf028_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:ca8e97d40c8fad6c8534b92250998f9e08cc4e9054969b64d53369837dd00fd9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:428815869664eb625aa9113d8c904ab96786ba4df794941a4356d911908bfc34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:57624f49f0a378d552dfe56402a5021de9633c83ab226a6c2bb5ef30d7ed4a2b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:a87d13b4f0b4dc5bab2bf1100c48f923c04896098dc2bbb7d7b0b090c106b178_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:e9ff11de6c0bc207f6c1115cb325e8f9d982debc263266bf0c80b8cc3a608e03_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:254a4f931c66afe106b27bcf75eaf797d406d09b1477566499678bca703c45b7_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8ccaa85ed8f1bf537c9338c1020d5ef1b2dcc1d395421c20264a0012d81b9e87_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e64d9edc8e2d6a9fff2e47e9ceebc41dce72cae3e7c6256caeabec031a0c0735_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:f9d93a0e94bb6dc05406f20d353b8c30a70f53cc43001789b3e08fde89e59447_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:c20d23c2a0217c9979e284696f725fa30dfea1b0af680334ad8d32305a79c619_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:07ebcf92360d02f470195b5efef42ff6c575397836e4738821a163ff5fe29686_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:67e408acce9dcc52c783e102967f552f3b6a28c58e45555e081171be4d13d5a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:847aaa1a157adbf06a3ab21b1017b7db2082e5f4d096afc9ec4ce802716d2b74_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:d69d304c26f30ca7082ff278998b4c11f86ffaee625bd51cfd5c7cc02fdc8ff2_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2f45d4abe59cad318e2ae06d0181d7d69f77e8080de41a14a64bc08c4a5fdd0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:32461752db18080dda5f913a8bf5a8710ca0ec5299e6a9bb9706172b3edbeacb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:a128f76e2fbe05da58d78922b442c763c86d0a739d5b5447100ec5a8d149cb70_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:b9f1a6c60cc04bb52e1e7c9406a5d87ecc0987ed4a5e5afea530bd2a029ac12c_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:319a989701e651dbacee67b5fb739ab819c0c244770f8df73c86a289187643d4_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:480a5bd00533b4200a763ffe7c04ecf5dfaccc82fd9b273bdee7bb7cfadec0e6_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a9cb230ed3bf10523d4cac75977d1384471658810ad1da3fc31d6ae8c6a5bb4e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c5f1f2e33446d3f6d4aa33448782fd3a92e3e352e9e1757a9997b1094fa6cf67_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1da0a366568250352a4a25b7bc97b56032f7428e6a6880ff71d615b233b9056_amd64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:aa961c074c03c766a7034eb59d4d18b8f447372765d88051e2f48361a0ce58f3_s390x",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b9e84969ea3c3c525b92ea0e5213d4f73c9feb964afdf7499333069b83471d80_arm64",
"Logging Subsystem for Red Hat OpenShift 6.2:registry.redhat.io/openshift-logging/vector-rhel9@sha256:ed131c2f84743b5842b1816761c07aa7a76ab647b72165c2901fa2f4d9887a0a_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…