RHSA-2026:83013
Vulnerability from csaf_redhat - Published: 2026-10-14 14:50 - Updated: 2026-10-15 16:12Summary
Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.17
Severity
Important
Notes
Topic: Logging for Red Hat OpenShift - 6.0.17
Details: Red Hat OpenShift Logging 6.0.17 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in aws-smithy-json. This vulnerability allows a remote, unauthenticated attacker to cause a denial of service (DoS) in smithy-rs generated servers. By sending a small HTTP request containing deeply nested JSON, the attacker can trigger uncontrolled recursion in the aws-smithy-json runtime, leading to stack exhaustion and a process abort. This can make the affected server unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-25681
Known not affected
30 products, the same list as for
CVE-2026-25681
Threats
Impact
Important
A flaw was found in OpenTelemetry-Go, the Go implementation of OpenTelemetry. A remote attacker can exploit this vulnerability by sending multiple 'baggage' header lines. The system's independent parsing and aggregation of each header field-value across multiple values can lead to amplified CPU and memory allocations, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64 | — |
Vendor Fix
fix
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64 | — |
Threats
Impact
Important
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-25681
Known not affected
30 products, the same list as for
CVE-2026-25681
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products, the same list as for
CVE-2026-25681
Known not affected
30 products, the same list as for
CVE-2026-25681
Threats
Impact
Important
A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64 | — |
Threats
Impact
Important
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2026-29181
Known not affected
30 products, the same list as for
CVE-2026-29181
Threats
Impact
Important
A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64 | — |
Vendor Fix
fix
|
Known not affected
22 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64 | — |
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-25681
Known not affected
30 products, the same list as for
CVE-2026-25681
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-25681
Known not affected
30 products, the same list as for
CVE-2026-25681
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-29181
Known not affected
30 products, the same list as for
CVE-2026-29181
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may panic due to a parameter value overflowing the message buffer. This can lead to a Denial of Service (DoS) condition, making the affected system unavailable.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-29181
Known not affected
30 products, the same list as for
CVE-2026-29181
Threats
Impact
Important
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-32283
Known not affected
30 products, the same list as for
CVE-2026-32283
Threats
Impact
Important
A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.
7.5 (High)
Affected products
Fixed
8 products, the same list as for
CVE-2026-33818
Known not affected
26 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.
8.1 (High)
Affected products
Fixed
8 products, the same list as for
CVE-2026-33818
Known not affected
26 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
8 products, the same list as for
CVE-2026-33818
Known not affected
26 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
8 products, the same list as for
CVE-2026-33818
Known not affected
26 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
8 products, the same list as for
CVE-2026-33818
Known not affected
26 products, the same list as for
CVE-2026-33818
Threats
Impact
Important
A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-25681
Known not affected
30 products, the same list as for
CVE-2026-25681
Threats
Impact
Important
A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.
7.5 (High)
Affected products
Fixed
12 products, the same list as for
CVE-2026-41178
Known not affected
22 products, the same list as for
CVE-2026-41178
Threats
Impact
Important
References
192 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Logging for Red Hat OpenShift - 6.0.17",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Logging 6.0.17 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:83013",
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-18140",
"url": "https://access.redhat.com/security/cve/CVE-2026-18140"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29181",
"url": "https://access.redhat.com/security/cve/CVE-2026-29181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32285",
"url": "https://access.redhat.com/security/cve/CVE-2026-32285"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
"url": "https://access.redhat.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-35469",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46600",
"url": "https://access.redhat.com/security/cve/CVE-2026-46600"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
"url": "https://access.redhat.com/security/cve/CVE-2026-56852"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
"url": "https://access.redhat.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
"url": "https://access.redhat.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63209",
"url": "https://access.redhat.com/security/cve/CVE-2026-63209"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
"url": "https://access.redhat.com/security/cve/CVE-2026-84445"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_83013.json"
}
],
"title": "Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.0.17",
"tracking": {
"current_release_date": "2026-10-15T16:12:19+00:00",
"generator": {
"date": "2026-10-15T16:12:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.2"
}
},
"id": "RHSA-2026:83013",
"initial_release_date": "2026-10-14T14:50:11+00:00",
"revision_history": [
{
"date": "2026-10-14T14:50:11+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-14T14:50:13+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-15T16:12:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Logging Subsystem for Red Hat OpenShift 6.0",
"product": {
"name": "Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:logging:6.0::el9"
}
}
}
],
"category": "product_family",
"name": "Logging Subsystem for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1791830134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-operator-bundle@sha256%3Afc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=1791830793"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1791500947"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1791776778"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3Ad34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1791500729"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1791499216"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-operator-bundle@sha256%3A3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=1791504713"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1791500864"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Aa141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1791500883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3Ae5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1791777198"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Aea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1791830134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3Afd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1791500947"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1791776778"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3Ac9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1791500729"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3Ac240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1791499216"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1791500864"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Aaac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1791500883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1791777198"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Ada07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1791830134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1791500947"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1791776778"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1791500729"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3Abce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1791499216"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1791500864"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Abc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1791500883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1791777198"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1791830134"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1791500947"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Ace935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1791776778"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1791500729"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1791499216"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1791500864"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Ad14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1791500883"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1791777198"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.0",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-18140",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-07-30T19:01:57.203369+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2509566"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in aws-smithy-json. This vulnerability allows a remote, unauthenticated attacker to cause a denial of service (DoS) in smithy-rs generated servers. By sending a small HTTP request containing deeply nested JSON, the attacker can trigger uncontrolled recursion in the aws-smithy-json runtime, leading to stack exhaustion and a process abort. This can make the affected server unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aws-smithy-json: aws-smithy-json: Denial of Service via uncontrolled recursion with deeply nested JSON",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in the `aws-smithy-json` runtime crate allows a remote unauthenticated attacker to trigger a denial of service by sending a crafted HTTP request with deeply nested JSON. Red Hat products utilizing `smithy-rs` generated servers, such as components in Red Hat Enterprise Linux and Red Hat Trusted Artifact Signer, are susceptible to service disruption if exposed to untrusted networks.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18140"
},
{
"category": "external",
"summary": "RHBZ#2509566",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2509566"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18140",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18140"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18140",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18140"
},
{
"category": "external",
"summary": "https://aws.amazon.com/security/security-bulletins/2026-067-aws/",
"url": "https://aws.amazon.com/security/security-bulletins/2026-067-aws/"
},
{
"category": "external",
"summary": "https://crates.io/crates/aws-smithy-json/0.62.7",
"url": "https://crates.io/crates/aws-smithy-json/0.62.7"
},
{
"category": "external",
"summary": "https://github.com/smithy-lang/smithy-rs/security/advisories/GHSA-8ffr-xgwf-xj56",
"url": "https://github.com/smithy-lang/smithy-rs/security/advisories/GHSA-8ffr-xgwf-xj56"
}
],
"release_date": "2026-07-30T18:34:04.099000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
},
{
"category": "workaround",
"details": "Restrict network access to services that process JSON input using the `aws-smithy-json` runtime. Configure firewalls to limit incoming connections to trusted sources, thereby reducing the exposure to remote unauthenticated denial of service attacks. If the service is reloaded or restarted, ensure firewall rules persist.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aws-smithy-json: aws-smithy-json: Denial of Service via uncontrolled recursion with deeply nested JSON"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-29181",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-07T21:01:21.484468+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456252"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go, the Go implementation of OpenTelemetry. A remote attacker can exploit this vulnerability by sending multiple \u0027baggage\u0027 header lines. The system\u0027s independent parsing and aggregation of each header field-value across multiple values can lead to amplified CPU and memory allocations, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting Red Hat Multicluster Engine for Kubernetes. A remote attacker can exploit this flaw by sending multiple crafted `baggage` HTTP header lines, leading to excessive CPU and memory consumption and potentially rendering services unavailable. This impact is significant due to the potential for widespread disruption in a multi-cluster environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29181"
},
{
"category": "external",
"summary": "RHBZ#2456252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456252"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29181"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-mh2q-q3fh-2475",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-mh2q-q3fh-2475"
}
],
"release_date": "2026-04-07T20:29:13.933000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-32285",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-03-26T20:01:54.925687+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451846"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32285"
},
{
"category": "external",
"summary": "RHBZ#2451846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451846"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32285",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285"
},
{
"category": "external",
"summary": "https://github.com/buger/jsonparser/issues/275",
"url": "https://github.com/buger/jsonparser/issues/275"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4514",
"url": "https://github.com/golang/vulndb/issues/4514"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4514",
"url": "https://pkg.go.dev/vuln/GO-2026-4514"
}
],
"release_date": "2026-03-26T19:40:51.837000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33818",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-08-13T22:12:37.151735+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "RHBZ#2515815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
},
{
"category": "external",
"summary": "https://go.dev/cl/814980",
"url": "https://go.dev/cl/814980"
},
{
"category": "external",
"summary": "https://go.dev/issue/80405",
"url": "https://go.dev/issue/80405"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5972",
"url": "https://pkg.go.dev/vuln/GO-2026-5972"
}
],
"release_date": "2026-08-13T21:58:52.821000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
},
{
"cve": "CVE-2026-35469",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-13T03:52:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457729"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "RHBZ#2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
}
],
"release_date": "2026-04-13T23:59:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
},
{
"category": "workaround",
"details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
},
{
"cve": "CVE-2026-41178",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-04T16:01:10.300537+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484830"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "RHBZ#2484830",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
"url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
}
],
"release_date": "2026-06-04T14:38:23.707000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to the Prometheus remote read endpoint (/api/v1/read). Configure firewall rules or network policies to permit connections only from trusted internal networks or authorized clients. This action reduces the attack surface by limiting exposure to unauthenticated remote attackers. A service restart or reload may be required for the changes to take effect.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
},
{
"cve": "CVE-2026-46600",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-07-21T20:01:59.038876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504234"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may panic due to a parameter value overflowing the message buffer. This can lead to a Denial of Service (DoS) condition, making the affected system unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46600"
},
{
"category": "external",
"summary": "RHBZ#2504234",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504234"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46600",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46600"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46600",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46600"
},
{
"category": "external",
"summary": "https://go.dev/cl/786345",
"url": "https://go.dev/cl/786345"
},
{
"category": "external",
"summary": "https://go.dev/issue/79795",
"url": "https://go.dev/issue/79795"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5942",
"url": "https://pkg.go.dev/vuln/GO-2026-5942"
}
],
"release_date": "2026-07-21T19:18:59.755000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing"
},
{
"cve": "CVE-2026-56852",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-21T20:01:56.266823+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504233"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56852"
},
{
"category": "external",
"summary": "RHBZ#2504233",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
},
{
"category": "external",
"summary": "https://go.dev/cl/794100",
"url": "https://go.dev/cl/794100"
},
{
"category": "external",
"summary": "https://go.dev/issue/80142",
"url": "https://go.dev/issue/80142"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5970",
"url": "https://pkg.go.dev/vuln/GO-2026-5970"
}
],
"release_date": "2026-07-21T19:18:59.951000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
},
{
"cve": "CVE-2026-56853",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:14:53.561638+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515827"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "RHBZ#2515827",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
},
{
"category": "external",
"summary": "https://go.dev/cl/795540",
"url": "https://go.dev/cl/795540"
},
{
"category": "external",
"summary": "https://go.dev/issue/80205",
"url": "https://go.dev/issue/80205"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6089",
"url": "https://pkg.go.dev/vuln/GO-2026-6089"
}
],
"release_date": "2026-08-13T21:58:53.092000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
},
{
"cve": "CVE-2026-56858",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-08-13T22:16:32.034590+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515838"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "RHBZ#2515838",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://go.dev/cl/807100",
"url": "https://go.dev/cl/807100"
},
{
"category": "external",
"summary": "https://go.dev/issue/80435",
"url": "https://go.dev/issue/80435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6091",
"url": "https://pkg.go.dev/vuln/GO-2026-6091"
}
],
"release_date": "2026-08-13T21:58:53.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
},
{
"cve": "CVE-2026-56859",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-08-13T22:16:52.493058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515840"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "RHBZ#2515840",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://go.dev/cl/803320",
"url": "https://go.dev/cl/803320"
},
{
"category": "external",
"summary": "https://go.dev/issue/80481",
"url": "https://go.dev/issue/80481"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6088",
"url": "https://pkg.go.dev/vuln/GO-2026-6088"
}
],
"release_date": "2026-08-13T21:58:52.959000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
},
{
"cve": "CVE-2026-56860",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:13:18.319384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "RHBZ#2515820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://go.dev/cl/803681",
"url": "https://go.dev/cl/803681"
},
{
"category": "external",
"summary": "https://go.dev/issue/80494",
"url": "https://go.dev/issue/80494"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6218",
"url": "https://pkg.go.dev/vuln/GO-2026-6218"
}
],
"release_date": "2026-08-13T21:58:53.731000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
},
{
"cve": "CVE-2026-56862",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-08-13T22:16:41.928450+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515839"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "RHBZ#2515839",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
},
{
"category": "external",
"summary": "https://go.dev/cl/804261",
"url": "https://go.dev/cl/804261"
},
{
"category": "external",
"summary": "https://go.dev/issue/80528",
"url": "https://go.dev/issue/80528"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6090",
"url": "https://pkg.go.dev/vuln/GO-2026-6090"
}
],
"release_date": "2026-08-13T21:58:53.216000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
},
{
"cve": "CVE-2026-63209",
"cwe": {
"id": "CWE-823",
"name": "Use of Out-of-range Pointer Offset"
},
"discovery_date": "2026-09-29T15:12:15.658458+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543236"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has rated this vulnerability as having an impact of Important because an unauthenticated remote attacker could trigger a denial of service by causing a process crash without requiring elevated permissions. In Red Hat environments where this Go library is embedded, exploitation requires that an application accepts untrusted dictionary structures for S2 compression and subsequently attempts encoding. Although the resulting memory access fault terminates the vulnerable process, the flaw is confined to process crashes and does not compromise data confidentiality or integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63209"
},
{
"category": "external",
"summary": "RHBZ#2543236",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543236"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63209",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63209"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536",
"url": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/releases/tag/v1.18.7",
"url": "https://github.com/klauspost/compress/releases/tag/v1.18.7"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
"url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw"
}
],
"release_date": "2026-09-29T14:58:53.366000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing"
},
{
"cve": "CVE-2026-84445",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-14T16:22:17.356407+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533175"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84445"
},
{
"category": "external",
"summary": "RHBZ#2533175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
"url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
"url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
"url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/issues/9354",
"url": "https://github.com/grpc/grpc-go/issues/9354"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9365",
"url": "https://github.com/grpc/grpc-go/pull/9365"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9366",
"url": "https://github.com/grpc/grpc-go/pull/9366"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9367",
"url": "https://github.com/grpc/grpc-go/pull/9367"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
}
],
"release_date": "2026-09-14T16:11:41.401000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-14T14:50:11+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/ocp-4-16-release-notes\n\nFor Red Hat OpenShift Logging 6.0, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.0",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:83013"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:fc457cd1699abd94a799380923a3770d10e5cefbbd3d244a8cb048b5739239a9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:02d494c5932a14116ca296dd7fc6f102b793628aa7e8e5a617ca912b4ba669c5_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:87405cb7293b2e1eed9399855c2613b51a1e1190decd26ff48b3eaffe3c9c131_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:da07253a03c0305bb18f6cdb0a5e684e1b96e127b18b1617b3392a7b03c8c289_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:ea114f7c9b3b456758289ecbf34fb7837b494bb8f855e5df27f0b3f8ad9db1a7_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:664c946b58a2eee37b1c74e1ee776ddaf2090839b6d6f3873f2c90eb13adc6c8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7503fd96fa13554c22bb728b825a2e5d35648f4f386d2dd809c99113780c5ac6_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:8c11c24cfda6f2648ad661c71c1d0d2f2f389204e728e970dd6ecd676be1316f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fd1b9dbe9801c4bb64eb2e8bff58f144d606bf61ee8035dbfb797170b05b5a13_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:20544daae536c50dcc2bb54ca7e69ffcb7fd010c400d3d4a747d50cf5d553d3c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:43c3e1d216744276ad7d57e05d1bdc3683f89448d6e6c3536b0dce682743f77d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4d8d79b549f86107ddd1a22ca1d75f0b1d03726d770270c099c0d7ec204caf22_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ce935be45dee71ae91415b446f4f8fd9ce8dbe47e7bc434a87230413af8e769a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:4a5c0ec2222e4eabfa7d6fc9631955585d0ccc8b469579064b3146e9c4f7465f_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:8a438b66bc1be55b3e498d24a8b9ac6ef0b2f9efb66070a6cc068c5eb656cdcb_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:c9cfac766192b6139f44b2e559bf6c92f2d336fb23f2f462b2bac4406973c4fc_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:d34bd1f6b4b38fd8f3f49b061bcdf696d0ef79017d04e1e0f5337438c22b0469_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:3c9a014c7720b51473510f412507dcd691b32743dd8ebfbd030142ea067f35bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:4c180ef7811a1077ca9b142b646e7c114c9b8bd0165d4927ff289a69bac6c8a0_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9472d54d1615b096109774cfb1cbb0a6bba7c24a21e50d470d3852dea854a9b8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:bce120d3a124e83b9500bba8f9af4e0717547939b1270f7eefbee0b00afdca68_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c240a88ec2f3d86677150528a2dfed2543d5f67d9144bb8774f42363656935d3_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:16e71627dfe24c5e2fc1c6f8b629c6869a8718ca3a5f0c6fd7ab02b13fa076bd_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:2ea92f619a692f08d810905953cf28316bdaa672af994e4a4523f81890b09ca2_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:7d8ea5e6e766c7f6a3701cc21e3148bb06598d7dfce16b73dfddf32139c44717_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:8b7fc486ea02041c207eb4e697d26343571b505ccd016d2cf70bcab30dfac65e_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:a141daa08d1b7d48886373616e1af6e555165c26bdc39ecad198080a8a9a52b8_amd64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:aac54337c369cb67fb4d44cdb301960b963c21a06d18f38b43f00a347278858a_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bc76cda39657da8f4159cd11599b1bc01793df1911f933642eb80782b0be818b_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:d14f0f83813da7e8e375ff9127f7e1c0e556e735d0f89ae0012aab8aee20e2e1_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:2553e1d1fc61ea3cd4dfb819dbaa7313dce0d2ceb977b9863bf4db71473a2225_s390x",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:402d59f92900f1843c4f64700e429ff04c4af4781c7356616783985b121e61a4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:5292b793f0daed6de110d8d110100ed4f265d20cfbd17df9ab105b1dd7b3c37f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.0:registry.redhat.io/openshift-logging/vector-rhel9@sha256:e5dd68262af3d3697b8292e37501fd386abe04435cff7de91bf19887097318d4_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.