RHSA-2026:88156
Vulnerability from csaf_redhat - Published: 2026-10-22 08:48 - Updated: 2026-10-22 21:06Summary
Red Hat Security Advisory: Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.16 security update.
Severity
Critical
Notes
Topic: An update for Openshift Jenkins is now available for Red Hat OpenShift Developer Tools - OpenShift Jenkins 4.16.
Details: Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.16 security update.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Spring Security framework. The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions that could potentially result in authorization rules not working properly. In some circumstances, this may lead to an authorization bypass.
4.8 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Eclipse Jetty, a widely used web server and servlet container. This vulnerability affects its HTTP Digest authentication mechanism, which is used to verify user identities. The issue arises because Jetty's hash computation for passwords does not correctly handle certain characters, leading to a weakness in how passwords are processed. A remote attacker could exploit this by crafting a specific password that generates the same internal hash as a legitimate user's password, thereby bypassing authentication and gaining unauthorized access to the victim's account.
9.1 (Critical)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously retained trailers, or a combination of previous and current request trailers.
5.3 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Moderate
A flaw was found in Bouncy Castle for Java. The BKS/UBER keystore component allocates memory based on untrusted length values before performing an integrity check. A remote attacker could exploit this vulnerability by providing a specially crafted keystore, leading to excessive memory allocation and a denial of service (DoS) condition.
6.5 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Moderate
A flaw was found in Jetty. A remote attacker can exploit a race condition in the server's handling of HTTP/2 RST_STREAM and GOAWAY frames. This can lead to blocking writes that are never unblocked, causing all server threads to become unresponsive. The primary impact is a Denial of Service (DoS) for the affected server.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Bouncy Castle for Java. During the RSA PKCS#1 verification process, the last two hash bytes are incorrectly skipped when a NULL-omitted path is utilized. This vulnerability could allow an attacker to bypass cryptographic signature verification, potentially leading to the acceptance of forged or malicious data as authentic.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Bouncy Castle for Java, including its LTS and FIPS variants. This vulnerability allows a remote attacker to trigger an Out-Of-Memory (OOM) error by providing specially crafted input during a definite-length read operation. This unbounded memory allocation can lead to a Denial of Service (DoS), making the affected system or application unavailable.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to bypass access controls and reach restricted resources. The issue occurs because the server and proxy components perform case-sensitive validation on host allowlists and denylists. By sending requests with altered character casing in the host name, an attacker can circumvent configured host filtering policies.
8.2 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Jetty. A remote attacker can exploit this vulnerability by sending specially crafted HTTP/1.1 chunked requests. This can cause Jetty and an intermediary proxy to interpret different request boundaries, potentially leading to HTTP request smuggling. This issue arises from Jetty's acceptance of a lone Line Feed (LF) character as a terminator during chunked request parsing.
8.2 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Spring Framework. Applications that process user-supplied Spring Expression Language (SpEL) expressions are vulnerable to a Denial of Service (DoS) attack. This occurs when the power operator (^) is used with large numerical operands, leading to excessive resource consumption. A remote attacker could exploit this to make the application unresponsive.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Spring Framework, specifically within Spring RSocket applications. A remote attacker could exploit this vulnerability by sending a malformed SETUP frame to an affected application. This could lead to a memory leak, potentially causing a denial of service.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Bouncy Castle for Java. A remote, unauthenticated attacker could exploit a quadratic-time escaping vulnerability when stringifying X.500 distinguished names. This could lead to a Denial of Service (DoS) due to excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Bouncy Castle for Java. A remote attacker could exploit this by presenting a stapled Online Certificate Status Protocol (OCSP) response that is not properly bound to the certificate being checked. This vulnerability allows for a certificate validation bypass, potentially leading to applications accepting invalid or revoked certificates. This could enable man-in-the-middle attacks or unauthorized access.
7.4 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Spring Framework. Applications utilizing Spring's data binding infrastructure to apply user-supplied property paths onto a target object are susceptible to a Denial of Service (DoS) attack. A remote attacker could exploit this by providing specially crafted input, leading to unbounded list growth and resource exhaustion. This can make the application unresponsive or crash it, preventing legitimate users from accessing the service.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Spring Framework. Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active. This could allow an attacker to circumvent security restrictions, potentially leading to unauthorized actions within the application.
9.8 (Critical)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Critical
A flaw was found in Bouncy Castle for Java. The software's processing of OpenPGP user-attribute subpackets does not properly limit their length, bounding them only by the Java Virtual Machine (JVM) maximum memory. A remote attacker could exploit this by sending a specially crafted OpenPGP message, leading to excessive memory consumption and a Denial of Service (DoS) condition where the application becomes unresponsive or crashes.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Bouncy Castle for Java. The BKS keystore, which is used for storing cryptographic keys, accepts legacy versions that utilize a 16-bit integrity Message Authentication Code (MAC) key. This weak integrity protection could allow an attacker to tamper with the keystore's contents without being detected, leading to a high integrity impact.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in jackson-databind. An unauthenticated attacker can trigger a denial of service (DoS) by exploiting an unbounded numeric parse vulnerability. This occurs during the deserialization of `javax.xml.datatype.Duration` or `javax.xml.datatype.XMLGregorianCalendar` fields from JSON strings, where the system processes arbitrarily long numeric components. This can lead to high CPU utilization, potentially saturating server worker threads and making the service unavailable.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in jackson-core. When parsing JSON data from character-based inputs, the parser does not enforce configured property name length limits while reading object keys into memory. A remote, unauthenticated attacker can exploit this flaw by submitting a crafted JSON payload containing an excessively long property name. Processing such input can exhaust system memory, causing the application to crash and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Bouncy Castle. In its Cryptographic Message Syntax (CMS) streaming parser, messages with mismatched attribute and algorithm fields are improperly handled, allowing attributes to be returned as valid even though they were not protected by the Message Authentication Code (MAC). A remote attacker capable of intercepting and modifying network traffic can exploit this flaw by inserting unauthorized attributes into an otherwise valid message. This can allow an attacker to manipulate application behavior and bypass security checks if the application relies on those attributes to make authorization or routing decisions.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Bouncy Castle. The certificate path reviewer (PKIXCertPathReviewer) fails to enforce name constraints on the end-entity certificate during validation. A remote attacker can exploit this issue by presenting a certificate that violates domain restrictions imposed by an issuing Certificate Authority (CA). Applications that rely on the reviewer to determine trust may incorrectly accept unauthorized certificates as valid.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in jsoup. A remote attacker could exploit an uncontrolled resource consumption vulnerability in the XmlTreeBuilder by providing a deeply nested XML document with uniquely-namespaced elements. This causes the builder to copy the entire inherited namespace map on every start element, leading to quadratic time and memory complexity. Successful exploitation could exhaust JVM heap memory, resulting in an OutOfMemoryError and terminating the application, effectively causing a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Apache Ant. The ftp and scp tasks, used for downloading files, are vulnerable to a path traversal issue. A malicious remote server can exploit this by providing specially crafted relative paths, allowing it to write files outside the intended download directory. This could lead to an attacker overwriting arbitrary files on the system with the permissions of the user running Ant, potentially compromising the system's integrity.
6.8 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Moderate
A flaw was found in Jenkins. This vulnerability allows a remote attacker to achieve remote code execution. By manipulating user-submitted configuration files, an attacker can exploit a deserialization weakness where specially crafted objects can process HTTP requests. This grants unauthorized access to the Script Console, leading to the execution of arbitrary code.
8.8 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Stapler, a web framework included in Jenkins. This vulnerability allows an attacker with 'Overall/Read' permission to instantiate objects related to configuration through form data binding. The system does not properly restrict the types of objects that can be created, enabling the attacker to instantiate types for which the field was not intended. This could lead to unauthorized manipulation of system configurations.
8.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Jenkins. The system log viewer does not properly escape log record metadata, such as the source, level, and timestamp. This vulnerability allows attackers who control agent processes to inject malicious scripts. Successful exploitation can lead to a stored cross-site scripting (XSS) attack, potentially enabling unauthorized actions or information disclosure within a user's browser.
7.3 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Stapler, a web framework used by Jenkins. An HTTP endpoint that serves dynamically generated JavaScript resources inadvertently embeds a user's cross-site request forgery (CSRF) token, also known as a crumb, as plain text. This allows a remote attacker, who controls a web page on the same site as Jenkins, to obtain a valid crumb for a targeted user's session. Consequently, the attacker can perform unauthorized actions on behalf of the user, leading to session hijacking.
8.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Jenkins. Attackers capable of submitting configuration updates can exploit a deserialization vulnerability by specifying values for transient fields. Although these fields are normally excluded from serialization, they are still processed during deserialization, which can lead to the overwriting of configuration objects. The ultimate impact depends on how these manipulated fields are subsequently used within the application.
8.8 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Jenkins. The system's application programming interface (API) and command-line interface (CLI) for managing agent configurations fail to properly validate the target agent. This vulnerability allows an attacker, who already has permissions to configure one agent, to overwrite the configuration of a different agent by manipulating the submitted data. Successful exploitation can lead to privilege escalation, granting the attacker control over the targeted agent's settings and access to sensitive information like its secret keys and environment variables.
8.1 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Jenkins. When a user authenticates using the "remember me" cookie, Jenkins fails to rotate the session identifier. This oversight allows a remote attacker, who can serve content on the same site as Jenkins, to set a known session cookie in a victim's browser. Consequently, once the victim authenticates, the attacker can use the known session cookie to gain unauthorized access to Jenkins as that user, leading to an authentication bypass.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in Jenkins. An attacker with Overall/Manage permission can exploit incorrect permission checks in the Appearance configuration page. This allows them to modify configuration options they should not have access to, potentially leading to unauthorized changes within the Jenkins environment.
CWE-266 - Incorrect Privilege AssignmentAffected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Low
A flaw was found in Stapler, a web framework used by Jenkins. This vulnerability allows an attacker, who can submit configuration forms, to modify public static fields of configuration objects. This modification can lead to changes that apply globally across the entire Jenkins instance, potentially impacting its operation and security.
5.4 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Moderate
A flaw was found in Jenkins. When serializing objects as JSON and Python through its REST API, Jenkins does not properly escape map keys. This allows an attacker who can control map property names to inject arbitrary fields into JSON and Python API responses, potentially leading to information disclosure or manipulation of data.
5.4 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Moderate
A flaw was found in zstd-jni. This vulnerability occurs due to insufficient validation of offset and length parameters within the `ZstdDictCompress` constructor. An attacker can exploit this by providing untrusted values, leading to an out-of-bounds memory read. This can result in the disclosure of sensitive native heap memory and cause the Java Virtual Machine (JVM) to crash, leading to a denial of service.
8.2 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in zstd-jni. Attackers can exploit this by supplying oversized per-sample lengths to the `Zstd.trainFromBufferDirect` function, which fails to validate the samples buffer capacity. This allows for reading past buffer boundaries, leading to out-of-bounds memory access and ultimately causing the Java Virtual Machine (JVM) to terminate, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in zstd-jni. This use-after-free vulnerability occurs because streams and contexts only hold a dictionary's shared lock during the load call, allowing the dictionary to be closed while still being referenced. A remote attacker could exploit this by closing a dictionary after associating it with a stream or context. Subsequent read or write operations would then access freed native memory, leading to silent data corruption or a Java Virtual Machine (JVM) crash, resulting in a denial of service.
7.7 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in zstd-jni. An attacker could exploit a use-after-free vulnerability by calling specific methods on closed streams without proper validation. This could lead to memory corruption, potentially allowing the attacker to corrupt unrelated objects or cause the Java Virtual Machine (JVM) to crash, resulting in a denial of service.
7.7 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in zstd-jni. This out-of-bounds read vulnerability in the Zstd.getFrameContentSize function occurs because it fails to validate negative srcPosition arguments. A remote attacker can supply negative offset values, bypassing bounds checks and accessing the native frame-header parser. This can lead to out-of-bounds memory reads, resulting in information disclosure or a Java Virtual Machine (JVM) crash.
8.2 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in jackson-core. An attacker can supply specially crafted JSON that, when deserialized into a numeric target type, triggers a Regular expression Denial of Service (ReDoS) vulnerability. This occurs due to quadratic backtracking in the NumberInput.looksLikeValidNumber() method's PATTERN_FLOAT regular expression. A small number of concurrent requests with a long input string can exhaust a server's request-handling thread pool, leading to a Denial of Service (DoS).
5.9 (Medium)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Moderate
A flaw was found in FasterXML jackson-core. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted, malformed token to the JsonFactory.createParser(DataInput) method. The UTF8DataInputJsonParser component, responsible for handling DataInput sources, does not properly limit the size of the error message generated for invalid tokens. This unbounded growth of the StringBuilder can consume excessive memory, leading to an OutOfMemoryError and crashing the Java Virtual Machine (JVM).
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in zstd-jni. This vulnerability, an out-of-bounds read, occurs in the ZstdDictDecompress constructor due to insufficient validation of offset and length arguments against dictionary array bounds. A remote attacker could exploit this by providing specially crafted input, leading to memory being read beyond its allocated buffer. This could result in the termination of the Java Virtual Machine (JVM), causing a denial of service.
8.2 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in luben zstd-jni. This flaw involves a use-after-free vulnerability in the ZstdCompressCtx.loadDict function, which handles dictionary sharing. A remote attacker could exploit this by manipulating dictionary sharing operations, potentially leading to denial of service, information disclosure, or arbitrary code execution.
7.3 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in FasterXML jackson-databind. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing specially crafted JSON input to an application that deserializes it into an identity-enabled collection or map. The flaw occurs due to inefficient processing of forward-references, where the system performs a quadratic amount of work for linearly growing input, leading to excessive CPU consumption.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in the Jenkins Script Security Plugin. Attackers with permissions to define and run sandboxed scripts, including Pipelines, can exploit this vulnerability. The plugin does not properly intercept operations performed on a null receiver, such as method calls or property accesses. This oversight allows an attacker to bypass the sandbox protection and execute arbitrary code within the Jenkins controller's Java Virtual Machine (JVM).
8.8 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
A flaw was found in the Jenkins Script Security Plugin. Attackers with permissions to define and run sandboxed scripts, such as Pipelines, can exploit this vulnerability. By not properly rejecting the @GroovyASTTransformationClass annotation, an attacker can run an arbitrary Abstract Syntax Tree (AST) transformation at compile time. This bypasses the sandbox protection, leading to arbitrary code execution within the Jenkins controller Java Virtual Machine (JVM).
8.8 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2024-38827
Known not affected
4 products, the same list as for
CVE-2024-38827
Threats
Impact
Important
References
330 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Openshift Jenkins is now available for Red Hat OpenShift Developer Tools - OpenShift Jenkins 4.16.",
"title": "Topic"
},
{
"category": "general",
"text": "Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.16 security update.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:88156",
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-38827",
"url": "https://access.redhat.com/security/cve/CVE-2024-38827"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10050",
"url": "https://access.redhat.com/security/cve/CVE-2026-10050"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10051",
"url": "https://access.redhat.com/security/cve/CVE-2026-10051"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12185",
"url": "https://access.redhat.com/security/cve/CVE-2026-12185"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12611",
"url": "https://access.redhat.com/security/cve/CVE-2026-12611"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12860",
"url": "https://access.redhat.com/security/cve/CVE-2026-12860"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-14682",
"url": "https://access.redhat.com/security/cve/CVE-2026-14682"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-18660",
"url": "https://access.redhat.com/security/cve/CVE-2026-18660"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-19203",
"url": "https://access.redhat.com/security/cve/CVE-2026-19203"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47886",
"url": "https://access.redhat.com/security/cve/CVE-2026-47886"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47888",
"url": "https://access.redhat.com/security/cve/CVE-2026-47888"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58059",
"url": "https://access.redhat.com/security/cve/CVE-2026-58059"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-58062",
"url": "https://access.redhat.com/security/cve/CVE-2026-58062"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59282",
"url": "https://access.redhat.com/security/cve/CVE-2026-59282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59283",
"url": "https://access.redhat.com/security/cve/CVE-2026-59283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59649",
"url": "https://access.redhat.com/security/cve/CVE-2026-59649"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59651",
"url": "https://access.redhat.com/security/cve/CVE-2026-59651"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-68497",
"url": "https://access.redhat.com/security/cve/CVE-2026-68497"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-68498",
"url": "https://access.redhat.com/security/cve/CVE-2026-68498"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-71888",
"url": "https://access.redhat.com/security/cve/CVE-2026-71888"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-71889",
"url": "https://access.redhat.com/security/cve/CVE-2026-71889"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-75140",
"url": "https://access.redhat.com/security/cve/CVE-2026-75140"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-78254",
"url": "https://access.redhat.com/security/cve/CVE-2026-78254"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84645",
"url": "https://access.redhat.com/security/cve/CVE-2026-84645"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84647",
"url": "https://access.redhat.com/security/cve/CVE-2026-84647"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84648",
"url": "https://access.redhat.com/security/cve/CVE-2026-84648"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84649",
"url": "https://access.redhat.com/security/cve/CVE-2026-84649"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84650",
"url": "https://access.redhat.com/security/cve/CVE-2026-84650"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84651",
"url": "https://access.redhat.com/security/cve/CVE-2026-84651"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84652",
"url": "https://access.redhat.com/security/cve/CVE-2026-84652"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84653",
"url": "https://access.redhat.com/security/cve/CVE-2026-84653"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84654",
"url": "https://access.redhat.com/security/cve/CVE-2026-84654"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84655",
"url": "https://access.redhat.com/security/cve/CVE-2026-84655"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-87795",
"url": "https://access.redhat.com/security/cve/CVE-2026-87795"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-87824",
"url": "https://access.redhat.com/security/cve/CVE-2026-87824"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-87825",
"url": "https://access.redhat.com/security/cve/CVE-2026-87825"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-87877",
"url": "https://access.redhat.com/security/cve/CVE-2026-87877"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89046",
"url": "https://access.redhat.com/security/cve/CVE-2026-89046"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89407",
"url": "https://access.redhat.com/security/cve/CVE-2026-89407"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89425",
"url": "https://access.redhat.com/security/cve/CVE-2026-89425"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-90560",
"url": "https://access.redhat.com/security/cve/CVE-2026-90560"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-90852",
"url": "https://access.redhat.com/security/cve/CVE-2026-90852"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-91777",
"url": "https://access.redhat.com/security/cve/CVE-2026-91777"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-92123",
"url": "https://access.redhat.com/security/cve/CVE-2026-92123"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-92125",
"url": "https://access.redhat.com/security/cve/CVE-2026-92125"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/jenkins",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/jenkins"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_88156.json"
}
],
"title": "Red Hat Security Advisory: Release of Red Hat OpenShift Developer Tools - Openshift Jenkins 4.16 security update.",
"tracking": {
"current_release_date": "2026-10-22T21:06:32+00:00",
"generator": {
"date": "2026-10-22T21:06:32+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.2"
}
},
"id": "RHSA-2026:88156",
"initial_release_date": "2026-10-22T08:48:40+00:00",
"revision_history": [
{
"date": "2026-10-22T08:48:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-22T08:48:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-22T21:06:32+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift Developer Tools and Services 4.16",
"product": {
"name": "OpenShift Developer Tools and Services 4.16",
"product_id": "OpenShift Developer Tools and Services 4.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ocp_tools:4.16::el9"
}
}
}
],
"category": "product_family",
"name": "OpenShift Developer Tools and Services"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"product": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"product_id": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jenkins-agent-base-rhel9@sha256%3Ab1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c?arch=amd64\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9\u0026tag=1792040156"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"product": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"product_id": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jenkins-rhel9@sha256%3A6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad?arch=amd64\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-rhel9\u0026tag=1792040287"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"product": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"product_id": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jenkins-agent-base-rhel9@sha256%3A083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2?arch=arm64\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9\u0026tag=1792040156"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"product": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"product_id": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jenkins-rhel9@sha256%3A1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f?arch=arm64\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-rhel9\u0026tag=1792040287"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"product": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"product_id": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jenkins-agent-base-rhel9@sha256%3Ac585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d?arch=ppc64le\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9\u0026tag=1792040156"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le",
"product": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le",
"product_id": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jenkins-rhel9@sha256%3Aa77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd?arch=ppc64le\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-rhel9\u0026tag=1792040287"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"product": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"product_id": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jenkins-agent-base-rhel9@sha256%3A9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff?arch=s390x\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9\u0026tag=1792040156"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"product": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"product_id": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jenkins-rhel9@sha256%3A89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e?arch=s390x\u0026repository_url=registry.redhat.io/ocp-tools-4/jenkins-rhel9\u0026tag=1792040287"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64 as a component of OpenShift Developer Tools and Services 4.16",
"product_id": "OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64"
},
"product_reference": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"relates_to_product_reference": "OpenShift Developer Tools and Services 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x as a component of OpenShift Developer Tools and Services 4.16",
"product_id": "OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x"
},
"product_reference": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"relates_to_product_reference": "OpenShift Developer Tools and Services 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64 as a component of OpenShift Developer Tools and Services 4.16",
"product_id": "OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64"
},
"product_reference": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"relates_to_product_reference": "OpenShift Developer Tools and Services 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le as a component of OpenShift Developer Tools and Services 4.16",
"product_id": "OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
},
"product_reference": "registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"relates_to_product_reference": "OpenShift Developer Tools and Services 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64 as a component of OpenShift Developer Tools and Services 4.16",
"product_id": "OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64"
},
"product_reference": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"relates_to_product_reference": "OpenShift Developer Tools and Services 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64 as a component of OpenShift Developer Tools and Services 4.16",
"product_id": "OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64"
},
"product_reference": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"relates_to_product_reference": "OpenShift Developer Tools and Services 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x as a component of OpenShift Developer Tools and Services 4.16",
"product_id": "OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x"
},
"product_reference": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"relates_to_product_reference": "OpenShift Developer Tools and Services 4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le as a component of OpenShift Developer Tools and Services 4.16",
"product_id": "OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
},
"product_reference": "registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le",
"relates_to_product_reference": "OpenShift Developer Tools and Services 4.16"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-38827",
"cwe": {
"id": "CWE-639",
"name": "Authorization Bypass Through User-Controlled Key"
},
"discovery_date": "2024-12-02T15:01:46.476197+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2329971"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Spring Security framework. The usage of String.toLowerCase() and String.toUpperCase() has some Locale dependent exceptions that could potentially result in authorization rules not working properly. In some circumstances, this may lead to an authorization bypass.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "spring-security: authorization bypass for case sensitive comparisons",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate impact: CVE-2024-38827 affects Red Hat products that include the vulnerable Spring Security core code. In certain locale-sensitive environments, String.toLowerCase() or String.toUpperCase() can perform case conversion differently than authorization comparisons expect, causing authorization rules to be evaluated incorrectly and potentially allowing a network attacker with no prior privileges, under the CVSS-assessed high-complexity conditions, to bypass authorization and obtain limited confidentiality or integrity impact. The current affects include affected delegated streams in Enterprise Application Platform, EAP XP, JBoss Data Grid 8, OpenShift Developer Tools \u0026 Services, and Red Hat build of Apache Camel, while JBoss Fuse is classified as new/OOSS. AMQ, EAP 7.4, JDG 7.1.2, Red Hat Build of Keycloak, Camel K, Process Automation Manager, RH-SSO, and cloud.redhat.com are marked not affected because the vulnerable code is not present. Affected delegated streams are handled through product-specific remediation, with fixes being pursued for applicable streams. The Red Hat Moderate assessment is consistent with the CVSS 4.8 score and its high attack complexity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-38827"
},
{
"category": "external",
"summary": "RHBZ#2329971",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2329971"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-38827",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38827"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-38827",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38827"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2024-38827",
"url": "https://spring.io/security/cve-2024-38827"
}
],
"release_date": "2024-12-02T14:32:12.471000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "spring-security: authorization bypass for case sensitive comparisons"
},
{
"cve": "CVE-2026-10050",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-07-16T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510732"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Jetty, a widely used web server and servlet container. This vulnerability affects its HTTP Digest authentication mechanism, which is used to verify user identities. The issue arises because Jetty\u0027s hash computation for passwords does not correctly handle certain characters, leading to a weakness in how passwords are processed. A remote attacker could exploit this by crafting a specific password that generates the same internal hash as a legitimate user\u0027s password, thereby bypassing authentication and gaining unauthorized access to the victim\u0027s account.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw allows an authentication bypass in Eclipse Jetty\u0027s HTTP Digest authentication. An attacker who knows a victim\u0027s username can craft a collision password if the original password contains non-Latin-1 characters, leading to unauthorized access in affected Red Hat products that utilize this authentication method.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10050"
},
{
"category": "external",
"summary": "RHBZ#2510732",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510732"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10050",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10050"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10050",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10050"
}
],
"release_date": "2026-07-16T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, ensure that all user passwords configured for HTTP Digest authentication in affected Eclipse Jetty deployments exclusively use characters within the Latin-1 character set. This prevents the character encoding collision that leads to authentication bypass.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision"
},
{
"cve": "CVE-2026-10051",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-07-14T10:01:09.470495+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499928"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously retained trailers, or a combination of previous and current request trailers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This information disclosure flaw in Eclipse Jetty allows HTTP/1.1 trailers from a previous request to be retained and subsequently exposed to other requests sharing the same connection. This could lead to unintended disclosure of sensitive information in Red Hat products utilizing Jetty, such as Red Hat AMQ and Enterprise Application Platform, particularly when connection reuse is active and trailers contain confidential data. The confidentiality impact is considered low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10051"
},
{
"category": "external",
"summary": "RHBZ#2499928",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499928"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10051",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10051"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10051",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10051"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/119",
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/119"
}
],
"release_date": "2026-07-14T08:44:38.233000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections"
},
{
"cve": "CVE-2026-12185",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-08-03T02:01:35.663272+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510202"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Bouncy Castle for Java. The BKS/UBER keystore component allocates memory based on untrusted length values before performing an integrity check. A remote attacker could exploit this vulnerability by providing a specially crafted keystore, leading to excessive memory allocation and a denial of service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bouncycastle: Bouncy Castle: Denial of Service via untrusted keystore length allocation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in Bouncy Castle for Java allows a remote attacker to trigger excessive memory allocation by providing a specially crafted BKS/UBER keystore. This can lead to a denial of service in applications that process untrusted keystores, such as those found in Red Hat Enterprise Application Platform and Red Hat JBoss Fuse. The impact is limited to denial of service and requires user interaction to process the malicious input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12185"
},
{
"category": "external",
"summary": "RHBZ#2510202",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510202"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12185",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12185"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12185",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12185"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/commit/7bbd7fe5f44132e5b6140a2914435c12430eeb3d",
"url": "https://github.com/bcgit/bc-java/commit/7bbd7fe5f44132e5b6140a2914435c12430eeb3d"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-12185",
"url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-12185"
}
],
"release_date": "2026-08-03T00:38:01.609000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bouncycastle: Bouncy Castle: Denial of Service via untrusted keystore length allocation"
},
{
"cve": "CVE-2026-12611",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-09-08T12:51:11.115918+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2529778"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jetty. A remote attacker can exploit a race condition in the server\u0027s handling of HTTP/2 RST_STREAM and GOAWAY frames. This can lead to blocking writes that are never unblocked, causing all server threads to become unresponsive. The primary impact is a Denial of Service (DoS) for the affected server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.eclipse.jetty.http2/http2-common: org.eclipse.jetty.http2/jetty-http2-common: Jetty: Denial of Service via HTTP/2 race condition",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important because a remote attacker who can reach a vulnerable Jetty service over HTTP/2 can cause server threads to block, potentially rendering the service unresponsive. Exploitation requires vulnerable Jetty code with HTTP/2 enabled and reachable by untrusted clients.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12611"
},
{
"category": "external",
"summary": "RHBZ#2529778",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2529778"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12611",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12611"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12611",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12611"
},
{
"category": "external",
"summary": "https://github.com/jetty/jetty.project/security/advisories/GHSA-gpg9-4257-cfm3",
"url": "https://github.com/jetty/jetty.project/security/advisories/GHSA-gpg9-4257-cfm3"
}
],
"release_date": "2026-09-08T12:28:51.669000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.eclipse.jetty.http2/http2-common: org.eclipse.jetty.http2/jetty-http2-common: Jetty: Denial of Service via HTTP/2 race condition"
},
{
"cve": "CVE-2026-12860",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-08-03T04:01:02.591427+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510256"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Bouncy Castle for Java. During the RSA PKCS#1 verification process, the last two hash bytes are incorrectly skipped when a NULL-omitted path is utilized. This vulnerability could allow an attacker to bypass cryptographic signature verification, potentially leading to the acceptance of forged or malicious data as authentic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A signature verification flaw was found in Bouncy Castle for Java\u0027s RSA PKCS#1 parser (`bcprov`). When verifying RSA PKCS#1 v1.5 signatures utilizing a NULL-omitted DigestInfo path, the verification routine incorrectly skips the last two bytes of the expected digest hash. An unauthenticated remote attacker can exploit this truncated comparison to craft forged signatures that pass verification, bypassing cryptographic integrity controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12860"
},
{
"category": "external",
"summary": "RHBZ#2510256",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510256"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12860"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/commit/ea5970ea9b2fb91d763b904692fd21089ca3e396",
"url": "https://github.com/bcgit/bc-java/commit/ea5970ea9b2fb91d763b904692fd21089ca3e396"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-12860",
"url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-12860"
}
],
"release_date": "2026-08-03T02:55:58.379000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Enforce strict DigestInfo encoding checks requiring explicit ASN.1 NULL parameters in RSA PKCS#1 v1.5 signature verification, or mandate the use of RSA-PSS signature schemes in application TLS/crypto configuration.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.bouncycastle/bc-java: org.bouncycastle/bc-lts-java: Bouncy Castle for Java: Cryptographic signature bypass in RSA PKCS#1 verification"
},
{
"cve": "CVE-2026-14682",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-03T04:01:09.225152+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510258"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Bouncy Castle for Java, including its LTS and FIPS variants. This vulnerability allows a remote attacker to trigger an Out-Of-Memory (OOM) error by providing specially crafted input during a definite-length read operation. This unbounded memory allocation can lead to a Denial of Service (DoS), making the affected system or application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: org.bouncycastle/bc-fips: org.bouncycastle/bctls-fips: Bouncy Castle for Java: Denial of Service due to unbounded memory allocation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Bouncy Castle for Java is bundled as a cryptographic provider across numerous Red Hat products. An unbounded up-front memory allocation on a definite-length read lets a remote attacker trigger an Out-Of-Memory condition with crafted input, resulting in a denial of service. This is broadly reachable wherever Bouncy Castle parses untrusted encoded data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-14682"
},
{
"category": "external",
"summary": "RHBZ#2510258",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510258"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-14682",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-14682"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-14682",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-14682"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/commit/37094e504ef50cf9ce4e0fb9e5105d495ff5c2d2",
"url": "https://github.com/bcgit/bc-java/commit/37094e504ef50cf9ce4e0fb9e5105d495ff5c2d2"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-14682",
"url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-14682"
}
],
"release_date": "2026-08-03T02:44:13.256000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a mitigation for this flaw other than updating the affected Bouncy Castle component to a fixed version (bc-java 1.85, LTS 2.73.12, BC-FJA bc-fips 1.0.2.7/2.0.2/2.1.3, or bctls-fips 1.0.24) once available for the affected product.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: org.bouncycastle/bc-fips: org.bouncycastle/bctls-fips: Bouncy Castle for Java: Denial of Service due to unbounded memory allocation"
},
{
"cve": "CVE-2026-18660",
"cwe": {
"id": "CWE-178",
"name": "Improper Handling of Case Sensitivity"
},
"discovery_date": "2026-10-15T09:40:58.551187+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2553134"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to bypass access controls and reach restricted resources. The issue occurs because the server and proxy components perform case-sensitive validation on host allowlists and denylists. By sending requests with altered character casing in the host name, an attacker can circumvent configured host filtering policies.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.eclipse.jetty/jetty-server: org.eclipse.jetty/jetty-proxy: Eclipse Jetty: Access control bypass via case-sensitive host filtering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw allows an attacker to bypass host-based access control in Eclipse Jetty\u0027s server and proxy components. By varying the letter case of the Host header, requests can slip past configured host allow/deny lists, letting an attacker reach resources that virtual-host or proxy filtering was meant to block in affected Red Hat products that use jetty-server or jetty-proxy for this purpose.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-18660"
},
{
"category": "external",
"summary": "RHBZ#2553134",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2553134"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18660",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18660"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-18660",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-18660"
},
{
"category": "external",
"summary": "https://github.com/jetty/jetty.project/security/advisories/GHSA-7wfj-j486-mxrf",
"url": "https://github.com/jetty/jetty.project/security/advisories/GHSA-7wfj-j486-mxrf"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/212",
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/212"
}
],
"release_date": "2026-10-15T09:38:02.125000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "There is no mitigation for this issue other than applying the fix. As a temporary workaround, administrators who rely on Jetty host allow/deny filtering should add case-variant duplicates of every configured hostname to the filter lists, or enforce hostname case-normalization at an upstream load balancer or reverse proxy, until the update is installed.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.eclipse.jetty/jetty-server: org.eclipse.jetty/jetty-proxy: Eclipse Jetty: Access control bypass via case-sensitive host filtering"
},
{
"cve": "CVE-2026-19203",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-09-08T12:33:32.310662+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2529768"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jetty. A remote attacker can exploit this vulnerability by sending specially crafted HTTP/1.1 chunked requests. This can cause Jetty and an intermediary proxy to interpret different request boundaries, potentially leading to HTTP request smuggling. This issue arises from Jetty\u0027s acceptance of a lone Line Feed (LF) character as a terminator during chunked request parsing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.eclipse.jetty/jetty-http: Jetty: HTTP request smuggling via crafted chunked requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Jetty in affected Red Hat products may permit remote, unauthenticated HTTP request smuggling when specially crafted HTTP/1.1 chunked requests traverse an intermediary that interprets request boundaries differently. Jetty 12.1 uses RFC 9110 compliance by default and is not affected unless configured to use legacy RFC 7230 or RFC 2616 compliance modes. Remediation is being pursued for vulnerable shipped versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-19203"
},
{
"category": "external",
"summary": "RHBZ#2529768",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2529768"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-19203",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-19203"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19203",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19203"
},
{
"category": "external",
"summary": "https://github.com/jetty/jetty.project/security/advisories/GHSA-xc35-c22g-239h",
"url": "https://github.com/jetty/jetty.project/security/advisories/GHSA-xc35-c22g-239h"
}
],
"release_date": "2026-09-08T12:08:37.576000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.eclipse.jetty/jetty-http: Jetty: HTTP request smuggling via crafted chunked requests"
},
{
"cve": "CVE-2026-47886",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-27T06:22:40.827128+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2524864"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Spring Framework. Applications that process user-supplied Spring Expression Language (SpEL) expressions are vulnerable to a Denial of Service (DoS) attack. This occurs when the power operator (^) is used with large numerical operands, leading to excessive resource consumption. A remote attacker could exploit this to make the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Spring Framework: org.springframework/spring-expression: Spring Framework: Denial of Service via unbounded exponentiation in SpEL expressions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A vulnerability was found in Spring Framework\u0027s Spring Expression Language (SpEL) engine. When evaluating untrusted SpEL expressions containing the power operator (^) with a BigDecimal or BigInteger operand and an excessively large exponent, the expression parser performs unbounded mathematical calculations. A remote, unauthenticated attacker can supply crafted SpEL queries to consume excessive CPU and memory resources, causing application thread exhaustion and resulting in a denial of service (DoS). Default container resource limits (cgroup memory and CPU quotas) constrain host-level impact, though application process unresponsiveness or crashes remain unavoidable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47886"
},
{
"category": "external",
"summary": "RHBZ#2524864",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524864"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47886",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47886"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47886",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47886"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-47886",
"url": "https://spring.io/security/cve-2026-47886"
}
],
"release_date": "2026-08-27T05:21:34.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Avoid evaluating untrusted, user-supplied Spring Expression Language (SpEL) input. Where SpEL evaluation of user input is mandatory, configure custom MethodResolvers or PropertyAccessors to sanitize expressions, or enforce strict execution timeouts and character white-listing upstream before expression parsing.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Spring Framework: org.springframework/spring-expression: Spring Framework: Denial of Service via unbounded exponentiation in SpEL expressions"
},
{
"cve": "CVE-2026-47888",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"discovery_date": "2026-08-27T06:22:21.330327+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2524860"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Spring Framework, specifically within Spring RSocket applications. A remote attacker could exploit this vulnerability by sending a malformed SETUP frame to an affected application. This could lead to a memory leak, potentially causing a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Spring Framework: Spring Framework: Memory leak via malformed RSocket SETUP frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Spring RSocket implementation within the Spring Framework. An unauthenticated remote attacker can send a specially crafted SETUP frame during connection initialization, triggering a memory leak. Processing the malformed frame prevents memory release, allowing repeated requests to exhaust application heap memory and lead to a denial of service. Standard Red Hat container deployments operating without exposed RSocket endpoints are not directly exposed to this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47888"
},
{
"category": "external",
"summary": "RHBZ#2524860",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2524860"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47888",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47888"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47888",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47888"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-47888",
"url": "https://spring.io/security/cve-2026-47888"
}
],
"release_date": "2026-08-27T05:21:36.474000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Disable RSocket transport listeners on the application if RSocket features are not actively utilized. If RSocket is required, restrict network connectivity to the RSocket port using ingress firewalls, API gateways, or service mesh network policies.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Spring Framework: Spring Framework: Memory leak via malformed RSocket SETUP frame"
},
{
"cve": "CVE-2026-58059",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-08-03T03:02:32.846217+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510250"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Bouncy Castle for Java. A remote, unauthenticated attacker could exploit a quadratic-time escaping vulnerability when stringifying X.500 distinguished names. This could lead to a Denial of Service (DoS) due to excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.bouncycastle/bc-java: Bouncy Castle for Java: Denial of Service via quadratic-time escaping of X.500 distinguished names",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An algorithmic complexity vulnerability was found in Bouncy Castle for Java. The library performs quadratic-time escaping while stringifying X.500 distinguished names. An unauthenticated remote attacker can exploit this by passing a specially crafted X.500 distinguished name\u2014such as within an X.509 certificate during TLS handshakes or PKI parsing operations\u2014forcing high CPU resource consumption. This execution causes processing delays and leads to Denial of Service (DoS) for applications parsing untrusted distinguished names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58059"
},
{
"category": "external",
"summary": "RHBZ#2510250",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510250"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58059"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/commit/7bf20eea8c1b71a4d3574b75ba20ccf26ffff36b",
"url": "https://github.com/bcgit/bc-java/commit/7bf20eea8c1b71a4d3574b75ba20ccf26ffff36b"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-58059",
"url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-58059"
}
],
"release_date": "2026-08-03T02:41:30.973000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Limit the maximum string length of incoming X.500 distinguished names at application or API gateway boundaries, or restrict the acceptance of unauthenticated client certificates containing complex distinguished names.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.bouncycastle/bc-java: Bouncy Castle for Java: Denial of Service via quadratic-time escaping of X.500 distinguished names"
},
{
"cve": "CVE-2026-58062",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-08-03T03:02:06.882172+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510240"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Bouncy Castle for Java. A remote attacker could exploit this by presenting a stapled Online Certificate Status Protocol (OCSP) response that is not properly bound to the certificate being checked. This vulnerability allows for a certificate validation bypass, potentially leading to applications accepting invalid or revoked certificates. This could enable man-in-the-middle attacks or unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Certificate validation bypass via stapled OCSP response",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This vulnerability in Bouncy Castle for Java allows a remote attacker to bypass certificate validation. By presenting a stapled OCSP response not properly bound to the certificate being checked, an attacker could cause applications to accept invalid or revoked certificates. This could facilitate man-in-the-middle attacks or unauthorized access in Red Hat products that rely on Bouncy Castle for certificate path validation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-58062"
},
{
"category": "external",
"summary": "RHBZ#2510240",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510240"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-58062",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58062"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-58062",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58062"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/commit/add5f822660f3b2c29fd824e2f4095469c42a1c7",
"url": "https://github.com/bcgit/bc-java/commit/add5f822660f3b2c29fd824e2f4095469c42a1c7"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-58062",
"url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-58062"
}
],
"release_date": "2026-08-03T02:35:28.180000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Where Bouncy Castle performs PKIX revocation checking with stapled OCSP, pin expected peer certificate or public-key fingerprints ([CME-404](https://cmetaxonomy.org/entries/CME-404.html)) so a stapled OCSP response for a different serial cannot substitute trust. Restrict TLS clients to trusted networks and peers ([CME-202](https://cmetaxonomy.org/entries/CME-202.html), [CME-203](https://cmetaxonomy.org/entries/CME-203.html)) to reduce man-in-the-middle opportunity against revoked certificates. If stapled OCSP is not required, avoid PKIXRevocationChecker.setOcspResponses() and use CRL or online OCSP fetch paths that enforce CertID binding. Upgrade to Bouncy Castle 1.85 or later (BC-LTS 2.73.12, or bc-fips 2.0.2 / 2.1.3) when available.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Certificate validation bypass via stapled OCSP response"
},
{
"cve": "CVE-2026-59282",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-27T20:19:47.944885+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2525254"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Spring Framework. Applications utilizing Spring\u0027s data binding infrastructure to apply user-supplied property paths onto a target object are susceptible to a Denial of Service (DoS) attack. A remote attacker could exploit this by providing specially crafted input, leading to unbounded list growth and resource exhaustion. This can make the application unresponsive or crash it, preventing legitimate users from accessing the service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.springframework:spring-beans: Spring Framework: Denial of Service via unbounded list growth in data binding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Spring Framework\u0027s property data binding infrastructure within the `spring-beans` module (`AbstractNestablePropertyAccessor`). When processing user-supplied property paths against target objects exposing self-populating List properties, property path navigation invokes `list.get(index)` without validating array bounds after the `autoGrowCollectionLimit` check. A remote unauthenticated attacker can supply request parameters with arbitrarily large array indices to force unbounded element allocation. This leads to heap memory exhaustion, application thread unresponsiveness, and process termination, resulting in a denial of service (DoS). Default container resource limits constrain host-level impact.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59282"
},
{
"category": "external",
"summary": "RHBZ#2525254",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525254"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59282"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-59282",
"url": "https://spring.io/security/cve-2026-59282"
}
],
"release_date": "2026-08-27T17:57:38.575000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Restrict property path data binding by explicitly configuring allowed fields via `DataBinder.setAllowedFields()` or `disallowedFields` on target controller endpoints. Alternatively, avoid exposing self-populating List properties on target DTO objects bound directly to untrusted web inputs.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.springframework:spring-beans: Spring Framework: Denial of Service via unbounded list growth in data binding"
},
{
"cve": "CVE-2026-59283",
"cwe": {
"id": "CWE-917",
"name": "Improper Neutralization of Special Elements used in an Expression Language Statement (\u0027Expression Language Injection\u0027)"
},
"discovery_date": "2026-08-27T20:14:25.753270+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2525192"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Spring Framework. Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active. This could allow an attacker to circumvent security restrictions, potentially leading to unauthorized actions within the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.springframework:spring-expression: Spring Framework: Safety Guard Bypass via SpEL Expression Compilation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Spring Framework\u0027s Spring Expression Language (SpEL) execution engine. When evaluating SpEL expressions using a SimpleEvaluationContext in compiled mode, the compiler fails to maintain safety restriction checks enforced during interpreted evaluation. A remote unauthenticated attacker can exploit this bypass by supplying crafted SpEL expressions that compile at runtime, overriding restricted method and property access controls to execute arbitrary code or unauthorized actions within the application context. Default SELinux policy constraints and non-root container isolation restrict host system access, confining primary impact to the application container layer.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59283"
},
{
"category": "external",
"summary": "RHBZ#2525192",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525192"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59283"
},
{
"category": "external",
"summary": "https://spring.io/security/cve-2026-59283",
"url": "https://spring.io/security/cve-2026-59283"
}
],
"release_date": "2026-08-27T17:57:40.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Disable SpEL compilation globally by setting the system property `spring.expression.compiler.mode` or configuration bean setting to `OFF`. Alternatively, restrict SpEL expression input to trusted internal sources and avoid parsing untrusted user-supplied strings via `SimpleEvaluationContext`.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "org.springframework:spring-expression: Spring Framework: Safety Guard Bypass via SpEL Expression Compilation"
},
{
"cve": "CVE-2026-59649",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-03T02:01:15.252829+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510195"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Bouncy Castle for Java. The software\u0027s processing of OpenPGP user-attribute subpackets does not properly limit their length, bounding them only by the Java Virtual Machine (JVM) maximum memory. A remote attacker could exploit this by sending a specially crafted OpenPGP message, leading to excessive memory consumption and a Denial of Service (DoS) condition where the application becomes unresponsive or crashes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.bouncycastle/bcpg-fips: org.bouncycastle/bcpg-jdk15on: org.bouncycastle/bcpg-jdk18on: Bouncy Castle for Java: Denial of Service due to unbounded OpenPGP user-attribute subpacket length",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Bouncy Castle for Java is bundled as a cryptographic provider across numerous Red Hat products. The OpenPGP user-attribute subpacket length is bounded only by the JVM maximum memory, so processing a specially crafted OpenPGP message causes excessive memory consumption and a denial of service. This is reachable only via the OpenPGP (bcpg) code paths; products that do not parse untrusted OpenPGP messages are not exposed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59649"
},
{
"category": "external",
"summary": "RHBZ#2510195",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510195"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59649"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59649",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59649"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/commit/a43c40dc12c3e1c6cbd03c83fe30aaec4029b824",
"url": "https://github.com/bcgit/bc-java/commit/a43c40dc12c3e1c6cbd03c83fe30aaec4029b824"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-59649",
"url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-59649"
}
],
"release_date": "2026-08-03T00:44:24.300000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a mitigation for this flaw other than updating the affected Bouncy Castle component to a fixed version (bc-java 1.85, LTS 2.73.12, or BC-FJA bcpg-fips 1.0.13/2.0.13/2.1.13) once available for the affected product.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.bouncycastle/bcpg-fips: org.bouncycastle/bcpg-jdk15on: org.bouncycastle/bcpg-jdk18on: Bouncy Castle for Java: Denial of Service due to unbounded OpenPGP user-attribute subpacket length"
},
{
"cve": "CVE-2026-59651",
"cwe": {
"id": "CWE-1240",
"name": "Use of a Cryptographic Primitive with a Risky Implementation"
},
"discovery_date": "2026-08-03T02:00:53.645318+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510188"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Bouncy Castle for Java. The BKS keystore, which is used for storing cryptographic keys, accepts legacy versions that utilize a 16-bit integrity Message Authentication Code (MAC) key. This weak integrity protection could allow an attacker to tamper with the keystore\u0027s contents without being detected, leading to a high integrity impact.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: Bouncy Castle for Java: Weak integrity protection in BKS keystore",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Bouncy Castle for Java is bundled as a cryptographic provider across numerous Red Hat products. The BKS keystore accepts legacy-format keystores protected by only a 16-bit integrity MAC key, weakening tamper detection and allowing undetected modification of keystore contents \u2014 a high integrity impact. Exploitation requires the application to load legacy-format BKS keystores.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59651"
},
{
"category": "external",
"summary": "RHBZ#2510188",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510188"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59651"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59651",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59651"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/commit/faf5daa6e9b8460f862afc0af1cc0da365f7d4d2",
"url": "https://github.com/bcgit/bc-java/commit/faf5daa6e9b8460f862afc0af1cc0da365f7d4d2"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/wiki/CVE-2026-59651",
"url": "https://github.com/bcgit/bc-java/wiki/CVE-2026-59651"
}
],
"release_date": "2026-08-03T00:41:23.578000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a mitigation for this flaw other than updating the affected Bouncy Castle component to a fixed version (bc-java 1.85 or LTS 2.73.12) once available for the affected product.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.bouncycastle/bcprov-jdk15on: org.bouncycastle/bcprov-jdk18on: Bouncy Castle for Java: Weak integrity protection in BKS keystore"
},
{
"cve": "CVE-2026-68497",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-09-11T16:01:15.919616+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531964"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind. An unauthenticated attacker can trigger a denial of service (DoS) by exploiting an unbounded numeric parse vulnerability. This occurs during the deserialization of `javax.xml.datatype.Duration` or `javax.xml.datatype.XMLGregorianCalendar` fields from JSON strings, where the system processes arbitrarily long numeric components. This can lead to high CPU utilization, potentially saturating server worker threads and making the service unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in jackson-databind allows remote attackers to consume excessive CPU by submitting specially crafted JSON with unbounded numeric values, causing a denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-68497"
},
{
"category": "external",
"summary": "RHBZ#2531964",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531964"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-68497",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68497"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-68497",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68497"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd",
"url": "https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/pull/6127",
"url": "https://github.com/FasterXML/jackson-databind/pull/6127"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7"
}
],
"release_date": "2026-09-11T15:49:30.366000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Upgrade jackson-databind to 2.18.10, 2.21.6, 2.22.2, or later fixed releases as applicable. Until updated, restrict untrusted JSON input size and complexity.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing"
},
{
"cve": "CVE-2026-68498",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-16T21:23:39.430928+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2554486"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-core. When parsing JSON data from character-based inputs, the parser does not enforce configured property name length limits while reading object keys into memory. A remote, unauthenticated attacker can exploit this flaw by submitting a crafted JSON payload containing an excessively long property name. Processing such input can exhaust system memory, causing the application to crash and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property names",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in jackson-core. When parsing JSON from character-based inputs (such as Reader, String, or char[]), ReaderBasedJsonParser fails to enforce the configured StreamReadConstraints.maxNameLength limit during name accumulation, validating against the larger maxStringLength limit instead. A remote, unauthenticated attacker can exploit this flaw by sending a crafted JSON object containing an excessively long property name, forcing allocations up to 100 million characters. This can cause heap exhaustion and an Out-Of-Memory application crash, resulting in a denial of service within standard process and container boundaries.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-68498"
},
{
"category": "external",
"summary": "RHBZ#2554486",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2554486"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-68498",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68498"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-68498",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68498"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/blob/2.x/release-notes/VERSION-2.x",
"url": "https://github.com/FasterXML/jackson-core/blob/2.x/release-notes/VERSION-2.x"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/blob/3.x/release-notes/VERSION",
"url": "https://github.com/FasterXML/jackson-core/blob/3.x/release-notes/VERSION"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/commit/2cd206de1163e3fcff7bdaca425274f00668b075",
"url": "https://github.com/FasterXML/jackson-core/commit/2cd206de1163e3fcff7bdaca425274f00668b075"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/pull/1643",
"url": "https://github.com/FasterXML/jackson-core/pull/1643"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-649p-m576-vr99",
"url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-649p-m576-vr99"
}
],
"release_date": "2026-10-16T21:11:03.551000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Parse untrusted JSON payloads directly from UTF-8 byte streams (e.g., InputStream or raw bytes) rather than character-based sources like String or Reader. Alternatively, configure custom StreamReadConstraints to lower maxStringLength or enforce a strict maxDocumentLength limit on custom JsonFactory instances.\n\n--- CME Mitigation Guidance (2026-10-20) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to enforce property name length limits during incremental segment accumulation in ReaderBasedJsonParser character-input parsing paths: upgrade to jackson-core 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2 (or the fixed Maven/Jackson Core/Pki Deps:10.6/Jackson Core/Rhaiis/Vllm Cuda Rhel/Rhaii/Vllm Gaudi Rhel/Ansible Automation Platform 25/De Minimal Rhel/Ansible Automation Platform 27/De Supported Rhel/Ansible Automation Platform 26/De Minimal Rhel/Ansible Automation Platform 27/De Minimal Rhel/Log4J/Exploit Intelligence/Agent Client Rhel/Jackson Bom/Jboss Webserver 7/Jws70 Openjdk17 Openshift Rhel/Ocp Tools 4/Jenkins Rhel/Jboss Webserver 7/Jws70 Openjdk21 Openshift Rhel/Offline Knowledge Portal/Rhokp Rhel/Rhoai/Odh Vllm Gaudi Rhel/Rhoai/Odh Trustyai Service Rhel/Rhoai/Odh Spark Operator Rhel/Rhoai/Odh Modelmesh Rhel/Rhoai/Odh Th06 Cpu Torch291 Py312 Rhel/Rhoai/Odh Th06 Cuda130 Torch210 Py312 Rhel/Rhoai/Odh Th06 Cuda130 Torch291 Py312 Rhel/Rhoai/Odh Th06 Cpu Torch210 Py312 Rhel/Rhoai/Odh Th06 Rocm64 Torch291 Py312 Rhel/Rhoai/Odh Th Torch Cuda Py312 Rhel/Rhoai/Odh Th Torch Cpu Py312 Rhel/Rhai Early Access/Docling Serve Cuda Rhel/Rhbk/Keycloak Rhel/Rhbk/Keycloak Rhel9 Operator/Rhelai3/Bootc Gaudi Rhel/Devspaces/Openvsx Rhel/Devspaces/Pluginregistry Rhel/Devspaces/Multicluster Redirector Rhel/Devspaces/Server Rhel/Openshift Serverless 1/Kn Eventing Integrations Aws S3 Sink Rhel/Openshift Serverless 1/Kn Eventing Integrations Aws Ddb Streams Source Rhel/Openshift Serverless 1/Kn Eventing Integrations Aws Sqs Sink Rhel/Openshift Serverless 1/Kn Eventing Integrations Aws Sns Sink Rhel/Openshift Serverless 1/Kn Eventing Integrations Log Sink Rhel/Openshift Serverless 1/Kn Eventing Integrations Aws S3 Source Rhel/Openshift Serverless 1/Kn Eventing Integrations Aws Sqs Source Rhel/Openshift Serverless 1/Kn Eventing Integrations Timer Source Rhel/Cloudservices/Insights Rbi Events/Cloudservices/Kafka Relations Sink/Cloudservices/Insights Rbi Rest/Cloudservices/Rhsm Auto Registration Listener/Cloudservices/Notifications Backend/Cloudservices/Notifications Gw/Cloudservices/Swatch Producer Azure/Cloudservices/Swatch Contracts/Cloudservices/Swatch Producer Aws/Cloudservices/Swatch Utilization/Cloudservices/Swatch Metrics builds), which track accumulated name length in _parseName2() and _handleOddName2() and invoke validateNameLength() when a buffer segment fills, closing all 2 injection vectors (crafted JSON payload with excessively long object property name, concurrent requests with oversized JSON keys targeting character-based parsers). Until patched, this is a concern on applications parsing untrusted JSON from character-based sources such as String, Reader, or char[], so parse untrusted JSON directly from UTF-8 byte streams such as InputStream rather than character sources, or configure custom StreamReadConstraints to lower maxStringLength and enforce maxDocumentLength. As a compensating measure, monitor cgroup memory pressure via memory.events and PSI thresholds to detect rapid memory spikes prior to process termination, set ulimit or prlimit process resource limits to constrain address space consumption caused by oversized property name buffering, apply cgroups v2 resource limits to contain the blast radius of JVM heap exhaustion to the affected container or process group, and throttle client request rates and connection volume to impede concurrent transmissions of oversized JSON keys. These controls limit blast radius and contain exploitation, but they do not fix the underlying unbounded memory buffering defect \u2014 apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-1010 cgroup Memory Pressure Monitoring (memory.events / PSI) (medium)",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property names"
},
{
"cve": "CVE-2026-71888",
"cwe": {
"id": "CWE-349",
"name": "Acceptance of Extraneous Untrusted Data With Trusted Data"
},
"discovery_date": "2026-10-03T08:50:56.382306+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545494"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Bouncy Castle. In its Cryptographic Message Syntax (CMS) streaming parser, messages with mismatched attribute and algorithm fields are improperly handled, allowing attributes to be returned as valid even though they were not protected by the Message Authentication Code (MAC). A remote attacker capable of intercepting and modifying network traffic can exploit this flaw by inserting unauthorized attributes into an otherwise valid message. This can allow an attacker to manipulate application behavior and bypass security checks if the application relies on those attributes to make authorization or routing decisions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bouncycastle: bouncycastle-fips: Bouncy Castle: Security bypass via unvalidated attributes in CMS AuthenticatedData parser",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Bouncy Castle\u0027s Cryptographic Message Syntax (CMS) streaming parser (CMSAuthenticatedDataParser). When parsing an AuthenticatedData structure where the digestAlgorithm field is absent but authenticated attributes (authAttrs) are present, the parser validates the Message Authentication Code (MAC) over content alone while returning authAttrs as authenticated. An attacker capable of modifying messages in transit can inject arbitrary attributes, such as security classification labels, into valid messages without holding MAC keys. This allows attackers to manipulate application authorization or routing decisions reliant on these attributes.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-71888"
},
{
"category": "external",
"summary": "RHBZ#2545494",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545494"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-71888",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71888"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71888",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71888"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/commit/dcb683b32b440f1beb1d2276a34930164281fb95",
"url": "https://github.com/bcgit/bc-java/commit/dcb683b32b440f1beb1d2276a34930164281fb95"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9071888",
"url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9071888"
}
],
"release_date": "2026-10-03T08:36:12.960000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Avoid using CMSAuthenticatedDataParser to stream untrusted CMS AuthenticatedData structures, or validate that messages containing authenticated attributes explicitly define a digestAlgorithm before trusting attribute values. Alternatively, process messages using non-streaming CMS parsers.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "bouncycastle: bouncycastle-fips: Bouncy Castle: Security bypass via unvalidated attributes in CMS AuthenticatedData parser"
},
{
"cve": "CVE-2026-71889",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-10-03T08:51:06.504776+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2545497"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Bouncy Castle. The certificate path reviewer (PKIXCertPathReviewer) fails to enforce name constraints on the end-entity certificate during validation. A remote attacker can exploit this issue by presenting a certificate that violates domain restrictions imposed by an issuing Certificate Authority (CA). Applications that rely on the reviewer to determine trust may incorrectly accept unauthorized certificates as valid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.bouncycastle/bcpkix-jdk18on: org.bouncycastle/bcpkix-fips: org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-lts8on: bouncycastle: Bouncy Castle: Certificate validation bypass via missing name constraint checks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Bouncy Castle\u0027s PKIXCertPathReviewer, where X.509 name constraints are not evaluated against the end-entity certificate during path validation. An attacker can exploit this by presenting a certificate chain with a leaf certificate violating domain or subtree restrictions set by an issuing Certificate Authority. If an application relies on PKIXCertPathReviewer rather than standard CertPathValidator to determine trust decisions, it may accept unauthorized or spoofed certificates as valid, bypassing intended certificate-based authentication and integrity controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-71889"
},
{
"category": "external",
"summary": "RHBZ#2545497",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2545497"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-71889",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71889"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71889",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71889"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/commit/06dcff2f51037095de126986285c998e3455ab85",
"url": "https://github.com/bcgit/bc-java/commit/06dcff2f51037095de126986285c998e3455ab85"
},
{
"category": "external",
"summary": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9071889",
"url": "https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9071889"
}
],
"release_date": "2026-10-03T08:31:01.178000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Do not use PKIXCertPathReviewer for trust or path validation decisions. Instead, validate certificate paths using the standard Java Cryptography Architecture via CertPathValidator.getInstance(\"PKIX\", \"BC\").",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.bouncycastle/bcpkix-jdk18on: org.bouncycastle/bcpkix-fips: org.bouncycastle/bcpkix-jdk15on: org.bouncycastle/bcpkix-lts8on: bouncycastle: Bouncy Castle: Certificate validation bypass via missing name constraint checks"
},
{
"cve": "CVE-2026-75140",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-08-20T16:23:22.032106+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2520546"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsoup. A remote attacker could exploit an uncontrolled resource consumption vulnerability in the XmlTreeBuilder by providing a deeply nested XML document with uniquely-namespaced elements. This causes the builder to copy the entire inherited namespace map on every start element, leading to quadratic time and memory complexity. Successful exploitation could exhaust JVM heap memory, resulting in an OutOfMemoryError and terminating the application, effectively causing a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.jsoup/jsoup: jsoup: Denial of Service via deeply nested XML documents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in jsoup. Parsing deeply nested XML documents can cause a denial of service via excessive stack consumption, leading to a StackOverflowError. An attacker who can supply untrusted XML input to an application using jsoup for parsing can exploit this to crash the application or exhaust system resources.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-75140"
},
{
"category": "external",
"summary": "RHBZ#2520546",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2520546"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-75140",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75140"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75140",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75140"
},
{
"category": "external",
"summary": "https://github.com/jhy/jsoup/commit/862ba2f1d48ee95609183dbcfc848c9fd7afc76a",
"url": "https://github.com/jhy/jsoup/commit/862ba2f1d48ee95609183dbcfc848c9fd7afc76a"
},
{
"category": "external",
"summary": "https://github.com/jhy/jsoup/pull/2556",
"url": "https://github.com/jhy/jsoup/pull/2556"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/jsoup-uncontrolled-resource-consumption-in-xmltreebuilder",
"url": "https://www.vulncheck.com/advisories/jsoup-uncontrolled-resource-consumption-in-xmltreebuilder"
}
],
"release_date": "2026-08-20T15:56:50.377000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Validate and limit the nesting depth of XML documents before passing them to jsoup for parsing. Applications should implement input size limits and consider using iterative XML parsers for untrusted input. Where possible, restrict the sources of XML input to trusted origins only.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.jsoup/jsoup: jsoup: Denial of Service via deeply nested XML documents"
},
{
"cve": "CVE-2026-78254",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-09-07T07:51:01.864093+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2529299"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Apache Ant. The ftp and scp tasks, used for downloading files, are vulnerable to a path traversal issue. A malicious remote server can exploit this by providing specially crafted relative paths, allowing it to write files outside the intended download directory. This could lead to an attacker overwriting arbitrary files on the system with the permissions of the user running Ant, potentially compromising the system\u0027s integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.apache.ant/ant: Apache Ant: Arbitrary file write via path traversal in ftp and scp tasks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in Apache Ant\u0027s `ftp` and `scp` tasks allows an attacker to write arbitrary files outside the intended download directory. This occurs when an Ant user connects to a malicious remote server or is subject to a machine-in-the-middle attack, enabling path traversal. Successful exploitation is limited to the privileges of the user executing Ant.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-78254"
},
{
"category": "external",
"summary": "RHBZ#2529299",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2529299"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-78254",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78254"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78254",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78254"
},
{
"category": "external",
"summary": "https://lists.apache.org/thread/05s46qrlbhd06c6rsgvxh8zo0l4p9scz",
"url": "https://lists.apache.org/thread/05s46qrlbhd06c6rsgvxh8zo0l4p9scz"
}
],
"release_date": "2026-09-07T07:41:54.077000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, users of Apache Ant\u0027s `scp` and `ftp` tasks should ensure that server identity checks are not bypassed. For `ftp` tasks not utilizing `ftps`, it is recommended to configure the tasks to use `ftps` to enhance security against machine-in-the-middle attacks.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "org.apache.ant/ant: Apache Ant: Arbitrary file write via path traversal in ftp and scp tasks"
},
{
"cve": "CVE-2026-84645",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-09-02T15:52:15.790372+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527579"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jenkins. This vulnerability allows a remote attacker to achieve remote code execution. By manipulating user-submitted configuration files, an attacker can exploit a deserialization weakness where specially crafted objects can process HTTP requests. This grants unauthorized access to the Script Console, leading to the execution of arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Jenkins: Remote Code Execution via crafted configuration files",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Jenkins. Remote code execution is possible through deserialization of crafted configuration files submitted via HTTP requests handled by Stapler. This issue affects Jenkins versions up to 2.579 (weekly) and up to 2.568.2 (LTS).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84645"
},
{
"category": "external",
"summary": "RHBZ#2527579",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527579"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84645",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84645"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84645",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84645"
},
{
"category": "external",
"summary": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3972",
"url": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3972"
}
],
"release_date": "2026-09-02T15:40:39.425000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Update to Jenkins 2.580 (weekly) or Jenkins LTS 2.568.3 or later.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jenkins: Jenkins: Remote Code Execution via crafted configuration files"
},
{
"cve": "CVE-2026-84647",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-09-02T15:57:57.861244+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527601"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Stapler, a web framework included in Jenkins. This vulnerability allows an attacker with \u0027Overall/Read\u0027 permission to instantiate objects related to configuration through form data binding. The system does not properly restrict the types of objects that can be created, enabling the attacker to instantiate types for which the field was not intended. This could lead to unauthorized manipulation of system configurations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Stapler: Jenkins: Stapler: Unintended configuration object instantiation via form data binding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this Important, CVSS 8.5, against CISA\u0027s 8.8. Both agree on attack vector, complexity, and the Overall/Read requirement; they differ on impact.\n\nStapler\u0027s form binding normally restricts which object types a submitted form can instantiate to match the target field. This flaw removes that restriction, so an attacker can force creation of unintended configuration objects. That is unauthorized modification of config state, an integrity problem. It is not a confidentiality or availability problem: instantiating an object doesn\u0027t return its contents to the attacker, and nothing in the advisory shows a crash or resource exhaustion path. Red Hat scores confidentiality Low and availability None accordingly. CISA\u0027s C:H/A:H assumes a worst case gadget chain outcome; Red Hat scores to what the advisory actually demonstrates.\n\nExploitation needs an account that already holds Overall/Read on the Jenkins instance in the ocp-tools-4 images. That permission isn\u0027t granted to anonymous users by default, and these deployments typically run inside an OpenShift project behind cluster auth, not exposed pre-auth. An attacker needs a foothold first.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84647"
},
{
"category": "external",
"summary": "RHBZ#2527601",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527601"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84647",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84647"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84647",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84647"
},
{
"category": "external",
"summary": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3915",
"url": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3915"
}
],
"release_date": "2026-09-02T15:40:40.711000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Restrict Overall/Read to the minimum set of trusted users; don\u0027t grant it to broad or anonymous groups. That permission is the flaw\u0027s own precondition for exploitation, so removing it from untrusted accounts closes this specific path. No other workaround is documented; the fix requires an updated Stapler.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Stapler: Jenkins: Stapler: Unintended configuration object instantiation via form data binding"
},
{
"cve": "CVE-2026-84648",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-09-02T16:01:04.047981+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527616"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jenkins. The system log viewer does not properly escape log record metadata, such as the source, level, and timestamp. This vulnerability allows attackers who control agent processes to inject malicious scripts. Successful exploitation can lead to a stored cross-site scripting (XSS) attack, potentially enabling unauthorized actions or information disclosure within a user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Jenkins: Stored cross-site scripting vulnerability in system log viewer",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Jenkins. A stored cross-site scripting vulnerability exists in the system log viewer due to failure to escape log record metadata (source, level, timestamp). Attackers controlling a Jenkins agent process can inject malicious content. This issue affects Jenkins versions up to 2.579 (weekly) and up to 2.568.2 (LTS). Jenkins 2.539 and later with CSP enabled mitigates this issue.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84648"
},
{
"category": "external",
"summary": "RHBZ#2527616",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527616"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84648",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84648"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84648",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84648"
},
{
"category": "external",
"summary": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3967",
"url": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3967"
}
],
"release_date": "2026-09-02T15:40:41.284000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Update to Jenkins 2.580 (weekly) or Jenkins LTS 2.568.3 or later.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jenkins: Jenkins: Stored cross-site scripting vulnerability in system log viewer"
},
{
"cve": "CVE-2026-84649",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-09-02T15:58:52.098239+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527605"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Stapler, a web framework used by Jenkins. An HTTP endpoint that serves dynamically generated JavaScript resources inadvertently embeds a user\u0027s cross-site request forgery (CSRF) token, also known as a crumb, as plain text. This allows a remote attacker, who controls a web page on the same site as Jenkins, to obtain a valid crumb for a targeted user\u0027s session. Consequently, the attacker can perform unauthorized actions on behalf of the user, leading to session hijacking.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: stapler: Stapler: Cross-site request forgery token disclosure allows session hijacking",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Stapler, as used in Jenkins, allows an attacker to perform session hijacking. By controlling a web page on the same site as Jenkins, an attacker can hijack a user\u0027s token through cross-site request forgery (CSRF), enabling unauthorized actions. This risk is elevated when the Resource Root URL is configured on the same domain as the Jenkins URL.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84649"
},
{
"category": "external",
"summary": "RHBZ#2527605",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527605"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84649",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84649"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84649",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84649"
},
{
"category": "external",
"summary": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3878",
"url": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3878"
}
],
"release_date": "2026-09-02T15:40:41.876000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "To mitigate this issue, administrators should disable the Resource Root URL feature in Jenkins or configure it to use a different domain than the main Jenkins instance. This prevents an attacker from loading dynamically generated JavaScript resources containing the CSRF token from a co-hosted page.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jenkins: stapler: Stapler: Cross-site request forgery token disclosure allows session hijacking"
},
{
"cve": "CVE-2026-84650",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-09-02T15:57:12.344648+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527604"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jenkins. Attackers capable of submitting configuration updates can exploit a deserialization vulnerability by specifying values for transient fields. Although these fields are normally excluded from serialization, they are still processed during deserialization, which can lead to the overwriting of configuration objects. The ultimate impact depends on how these manipulated fields are subsequently used within the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Jenkins: Configuration overwrite via transient field deserialization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Jenkins. Configuration overwrite is possible via transient field deserialization, allowing authenticated users to specify values of transient fields during configuration updates. This issue affects Jenkins versions up to 2.579 (weekly) and up to 2.568.2 (LTS).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84650"
},
{
"category": "external",
"summary": "RHBZ#2527604",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527604"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84650",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84650"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84650",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84650"
},
{
"category": "external",
"summary": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-4032",
"url": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-4032"
}
],
"release_date": "2026-09-02T15:40:42.465000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Update to Jenkins 2.580 (weekly) or Jenkins LTS 2.568.3 or later.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jenkins: Jenkins: Configuration overwrite via transient field deserialization"
},
{
"cve": "CVE-2026-84651",
"cwe": {
"id": "CWE-386",
"name": "Symbolic Name not Mapping to Correct Object"
},
"discovery_date": "2026-09-02T15:52:53.255704+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527582"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jenkins. The system\u0027s application programming interface (API) and command-line interface (CLI) for managing agent configurations fail to properly validate the target agent. This vulnerability allows an attacker, who already has permissions to configure one agent, to overwrite the configuration of a different agent by manipulating the submitted data. Successful exploitation can lead to privilege escalation, granting the attacker control over the targeted agent\u0027s settings and access to sensitive information like its secret keys and environment variables.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Jenkins: Privilege escalation via agent configuration overwrite",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Jenkins. Privilege escalation is possible via agent configuration overwrite, allowing users with Agent/Configure permission to overwrite a different agent\u0027s configuration by manipulating the agent name in submitted XML. This issue affects Jenkins versions up to 2.579 (weekly) and up to 2.568.2 (LTS).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84651"
},
{
"category": "external",
"summary": "RHBZ#2527582",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527582"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84651",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84651"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84651",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84651"
},
{
"category": "external",
"summary": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-4025",
"url": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-4025"
}
],
"release_date": "2026-09-02T15:40:43.080000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Update to Jenkins 2.580 (weekly) or Jenkins LTS 2.568.3 or later.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jenkins: Jenkins: Privilege escalation via agent configuration overwrite"
},
{
"cve": "CVE-2026-84652",
"cwe": {
"id": "CWE-613",
"name": "Insufficient Session Expiration"
},
"discovery_date": "2026-09-02T16:01:15.829920+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527618"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jenkins. When a user authenticates using the \"remember me\" cookie, Jenkins fails to rotate the session identifier. This oversight allows a remote attacker, who can serve content on the same site as Jenkins, to set a known session cookie in a victim\u0027s browser. Consequently, once the victim authenticates, the attacker can use the known session cookie to gain unauthorized access to Jenkins as that user, leading to an authentication bypass.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Jenkins: Authentication bypass via session cookie non-rotation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Jenkins. When a user authenticates using the \"remember me\" cookie, Jenkins fails to rotate the session identifier. This allows an attacker who can serve content on the same site as Jenkins to set a known session cookie in the victim\u0027s browser, then hijack the session once the victim authenticates. This issue affects Jenkins versions up to 2.579 (weekly) and up to 2.568.2 (LTS).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84652"
},
{
"category": "external",
"summary": "RHBZ#2527618",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527618"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84652",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84652"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84652",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84652"
},
{
"category": "external",
"summary": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-4016",
"url": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-4016"
}
],
"release_date": "2026-09-02T15:40:43.653000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Update to Jenkins 2.580 (weekly) or Jenkins LTS 2.568.3 or later. As a workaround, disable \"remember me\" functionality if not required.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jenkins: Jenkins: Authentication bypass via session cookie non-rotation"
},
{
"cve": "CVE-2026-84653",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"discovery_date": "2026-09-02T15:54:08.339812+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527590"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jenkins. An attacker with Overall/Manage permission can exploit incorrect permission checks in the Appearance configuration page. This allows them to modify configuration options they should not have access to, potentially leading to unauthorized changes within the Jenkins environment.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Jenkins: Unauthorized configuration modification due to incorrect permission checks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Jenkins. Unauthorized configuration modification is possible due to incorrect permission checks in REST and CLI endpoints. Users with Overall/Manage permission can modify certain configuration settings without proper authorization. When combined with the Simple Theme Plugin, this can lead to cross-site scripting vulnerabilities. This issue affects Jenkins versions up to 2.579 (weekly) and up to 2.568.2 (LTS).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84653"
},
{
"category": "external",
"summary": "RHBZ#2527590",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527590"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84653",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84653"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84653",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84653"
},
{
"category": "external",
"summary": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3981",
"url": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3981"
}
],
"release_date": "2026-09-02T15:40:44.280000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Update to Jenkins 2.580 (weekly) or Jenkins LTS 2.568.3 or later.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 2.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jenkins: Jenkins: Unauthorized configuration modification due to incorrect permission checks"
},
{
"cve": "CVE-2026-84654",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-09-02T15:54:34.975373+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527588"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Stapler, a web framework used by Jenkins. This vulnerability allows an attacker, who can submit configuration forms, to modify public static fields of configuration objects. This modification can lead to changes that apply globally across the entire Jenkins instance, potentially impacting its operation and security.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.kohsuke.stapler/stapler: jenkins: Stapler: Global configuration modification via form data binding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw of moderate severity was found in the Stapler web framework used by Jenkins. Stapler\u0027s form data binding allows setting public static fields of the bound configuration object, so an authenticated attacker who is able to submit configuration forms can modify public static fields of the configuration objects those forms are bound to, resulting in changes that apply globally to the Jenkins instance and potentially impacting its operation and security. Red Hat rated this flaw Moderate (CVSS 5.4, CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N), consistent with the upstream Jenkins severity, as exploitation requires an attacker with the ability to submit configuration forms and results in limited confidentiality and integrity impact. The Jenkins offerings shipped in OpenShift Developer Tools and Services (ocp-tools-4) are affected, and a fix is being pursued through the delegated upstream maintainers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84654"
},
{
"category": "external",
"summary": "RHBZ#2527588",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527588"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84654",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84654"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84654",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84654"
},
{
"category": "external",
"summary": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3926",
"url": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3926"
}
],
"release_date": "2026-09-02T15:40:44.871000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "org.kohsuke.stapler/stapler: jenkins: Stapler: Global configuration modification via form data binding"
},
{
"cve": "CVE-2026-84655",
"cwe": {
"id": "CWE-838",
"name": "Inappropriate Encoding for Output Context"
},
"discovery_date": "2026-09-02T15:53:23.157209+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527585"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Jenkins. When serializing objects as JSON and Python through its REST API, Jenkins does not properly escape map keys. This allows an attacker who can control map property names to inject arbitrary fields into JSON and Python API responses, potentially leading to information disclosure or manipulation of data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins: Jenkins: Information injection via unescaped map keys in REST API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Jenkins. Information injection is possible via unescaped map keys in the REST API, allowing attackers to inject arbitrary fields into API responses. This issue affects Jenkins versions up to 2.579 (weekly) and up to 2.568.2 (LTS).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84655"
},
{
"category": "external",
"summary": "RHBZ#2527585",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527585"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84655",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84655"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84655",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84655"
},
{
"category": "external",
"summary": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3879",
"url": "https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3879"
}
],
"release_date": "2026-09-02T15:40:45.453000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Update to Jenkins 2.580 (weekly) or Jenkins LTS 2.568.3 or later.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jenkins: Jenkins: Information injection via unescaped map keys in REST API"
},
{
"cve": "CVE-2026-87795",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-09T10:21:04.988917+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2530661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in zstd-jni. This vulnerability occurs due to insufficient validation of offset and length parameters within the `ZstdDictCompress` constructor. An attacker can exploit this by providing untrusted values, leading to an out-of-bounds memory read. This can result in the disclosure of sensitive native heap memory and cause the Java Virtual Machine (JVM) to crash, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.github.luben/zstd-jni: zstd-jni: Out-of-bounds read in ZstdDictCompress constructor leads to denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of an out-of-bounds read in zstd-jni caused by insufficient validation of offset and length values in the ZstdDictCompress constructor. An attacker who can influence these values may cause a JVM crash and potentially disclose native heap data. Affected Red Hat products are tracked through their existing remediation workflow.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-87795"
},
{
"category": "external",
"summary": "RHBZ#2530661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2530661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-87795",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87795"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-87795",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87795"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni",
"url": "https://github.com/luben/zstd-jni"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/ZstdDictCompress.java",
"url": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/ZstdDictCompress.java"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/native/jni_fast_zstd.c",
"url": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/native/jni_fast_zstd.c"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/commit/0d64de4dee6606ff506be36c7f2e714ad0c80fdb",
"url": "https://github.com/luben/zstd-jni/commit/0d64de4dee6606ff506be36c7f2e714ad0c80fdb"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/commit/1c4e5a6c3ce8458095225d987d669e6a0937734a",
"url": "https://github.com/luben/zstd-jni/commit/1c4e5a6c3ce8458095225d987d669e6a0937734a"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14",
"url": "https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/security/advisories/GHSA-ff36-7w3w-g8rm",
"url": "https://github.com/luben/zstd-jni/security/advisories/GHSA-ff36-7w3w-g8rm"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/zstd-jni-1.2.0-through-1.5.7-13-out-of-bounds-read-via-zstddictcompress",
"url": "https://www.vulncheck.com/advisories/zstd-jni-1.2.0-through-1.5.7-13-out-of-bounds-read-via-zstddictcompress"
}
],
"release_date": "2026-09-09T10:07:28.656000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Update com.github.luben/zstd-jni to version 1.5.7-14 or later. Until updated, do not pass attacker-controlled offset or length values to ZstdDictCompress.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.github.luben/zstd-jni: zstd-jni: Out-of-bounds read in ZstdDictCompress constructor leads to denial of service"
},
{
"cve": "CVE-2026-87824",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-09T14:51:05.674319+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2530998"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in zstd-jni. Attackers can exploit this by supplying oversized per-sample lengths to the `Zstd.trainFromBufferDirect` function, which fails to validate the samples buffer capacity. This allows for reading past buffer boundaries, leading to out-of-bounds memory access and ultimately causing the Java Virtual Machine (JVM) to terminate, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.github.luben/zstd-jni: zstd-jni: Denial of Service (DoS) via out-of-bounds read in Zstd.trainFromBufferDirect",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has determined that CVE-2026-87824 affects Red Hat products that include the zstd-jni library in a vulnerable version. The vulnerability can allow a remote attacker to terminate the Java Virtual Machine by supplying crafted sample lengths to the dictionary-training function.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-87824"
},
{
"category": "external",
"summary": "RHBZ#2530998",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2530998"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-87824",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87824"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-87824",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87824"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni",
"url": "https://github.com/luben/zstd-jni"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/Zstd.java",
"url": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/Zstd.java"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/native/jni_zdict.c",
"url": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/native/jni_zdict.c"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/commit/53d3c6342883f7d6717b2477a7f9c1b4a4a56980",
"url": "https://github.com/luben/zstd-jni/commit/53d3c6342883f7d6717b2477a7f9c1b4a4a56980"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/commit/bba6cfca2c0897f1fa004f4193247479f10da853",
"url": "https://github.com/luben/zstd-jni/commit/bba6cfca2c0897f1fa004f4193247479f10da853"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14",
"url": "https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/security/advisories/GHSA-257p-3h6w-pg7h",
"url": "https://github.com/luben/zstd-jni/security/advisories/GHSA-257p-3h6w-pg7h"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/zstd-jni-1.3.3-1-through-1.5.7-13-out-of-bounds-read-via-zstd-trainfrombufferdirect",
"url": "https://www.vulncheck.com/advisories/zstd-jni-1.3.3-1-through-1.5.7-13-out-of-bounds-read-via-zstd-trainfrombufferdirect"
}
],
"release_date": "2026-09-09T14:32:44.099000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "No complete workaround is currently available. As a temporary measure, applications using Zstd.trainFromBufferDirect() should validate that all sample lengths are non-negative and that their total does not exceed the capacity of the samples buffer before calling the function. Avoid passing attacker-controlled sample length arrays to this function until an update is available. Upgrade to a Red Hat product release containing zstd-jni 1.5.7-14 or later when available.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.github.luben/zstd-jni: zstd-jni: Denial of Service (DoS) via out-of-bounds read in Zstd.trainFromBufferDirect"
},
{
"cve": "CVE-2026-87825",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-09-09T14:52:13.405564+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531007"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in zstd-jni. This use-after-free vulnerability occurs because streams and contexts only hold a dictionary\u0027s shared lock during the load call, allowing the dictionary to be closed while still being referenced. A remote attacker could exploit this by closing a dictionary after associating it with a stream or context. Subsequent read or write operations would then access freed native memory, leading to silent data corruption or a Java Virtual Machine (JVM) crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.github.luben/zstd-jni: zstd-jni: Data corruption or denial of service via use-after-free vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in zstd-jni that could lead to silent data corruption or JVM crashes due to a use-after-free vulnerability. The flaw arises when a dictionary is prematurely closed while still actively referenced by compression or decompression streams, potentially impacting Red Hat products that utilize zstd-jni for data handling.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-87825"
},
{
"category": "external",
"summary": "RHBZ#2531007",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531007"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-87825",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87825"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-87825",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87825"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni",
"url": "https://github.com/luben/zstd-jni"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/BaseZstdBufferDecompressingStreamNoFinalizer.java",
"url": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/BaseZstdBufferDecompressingStreamNoFinalizer.java"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/ZstdInputStreamNoFinalizer.java",
"url": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/ZstdInputStreamNoFinalizer.java"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/commit/0827ed02551bbd8d6f8e4bbff99d83bf50f91938",
"url": "https://github.com/luben/zstd-jni/commit/0827ed02551bbd8d6f8e4bbff99d83bf50f91938"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/commit/393d7311766abbc285b149302c0fe1f94b16d555",
"url": "https://github.com/luben/zstd-jni/commit/393d7311766abbc285b149302c0fe1f94b16d555"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/commit/a560131d7834598afd9cea6b7c107bc88e915936",
"url": "https://github.com/luben/zstd-jni/commit/a560131d7834598afd9cea6b7c107bc88e915936"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14",
"url": "https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/security/advisories/GHSA-947w-pxjj-c7m9",
"url": "https://github.com/luben/zstd-jni/security/advisories/GHSA-947w-pxjj-c7m9"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/zstd-jni-1.3.8-4-through-1.5.7-13-use-after-free-of-compression-and-decompression-dictionaries",
"url": "https://www.vulncheck.com/advisories/zstd-jni-1.3.8-4-through-1.5.7-13-use-after-free-of-compression-and-decompression-dictionaries"
}
],
"release_date": "2026-09-09T14:32:44.795000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.github.luben/zstd-jni: zstd-jni: Data corruption or denial of service via use-after-free vulnerability"
},
{
"cve": "CVE-2026-87877",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2026-09-09T14:51:43.444501+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531003"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in zstd-jni. An attacker could exploit a use-after-free vulnerability by calling specific methods on closed streams without proper validation. This could lead to memory corruption, potentially allowing the attacker to corrupt unrelated objects or cause the Java Virtual Machine (JVM) to crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.github.luben/zstd-jni: zstd-jni: Use-After-Free vulnerability allows memory corruption and denial of service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has determined that CVE-2026-87877 affects Red Hat products that include the zstd-jni library in a vulnerable version. The vulnerability can allow memory corruption or denial of service when specific stream methods are called after the stream has been closed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-87877"
},
{
"category": "external",
"summary": "RHBZ#2531003",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531003"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-87877",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87877"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-87877",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87877"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni",
"url": "https://github.com/luben/zstd-jni"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/BaseZstdBufferDecompressingStreamNoFinalizer.java",
"url": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/BaseZstdBufferDecompressingStreamNoFinalizer.java"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/ZstdInputStreamNoFinalizer.java",
"url": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/ZstdInputStreamNoFinalizer.java"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/commit/0827ed02551bbd8d6f8e4bbff99d83bf50f91938",
"url": "https://github.com/luben/zstd-jni/commit/0827ed02551bbd8d6f8e4bbff99d83bf50f91938"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/commit/393d7311766abbc285b149302c0fe1f94b16d555",
"url": "https://github.com/luben/zstd-jni/commit/393d7311766abbc285b149302c0fe1f94b16d555"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/commit/f38f9a1563113d96d0fc38baee543f7457dd8a8e",
"url": "https://github.com/luben/zstd-jni/commit/f38f9a1563113d96d0fc38baee543f7457dd8a8e"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14",
"url": "https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/security/advisories/GHSA-2jw3-mg7f-vw4q",
"url": "https://github.com/luben/zstd-jni/security/advisories/GHSA-2jw3-mg7f-vw4q"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/zstd-jni-1.3.8-4-through-1.5.7-13-use-after-free-via-setters-called-after-close",
"url": "https://www.vulncheck.com/advisories/zstd-jni-1.3.8-4-through-1.5.7-13-use-after-free-via-setters-called-after-close"
}
],
"release_date": "2026-09-09T14:32:45.512000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "No complete workaround is currently available. As a temporary measure, applications using zstd-jni should not call setDict(), setLongMax(), setLevel(), or setRefMultipleDDicts() on a stream after close(). Upgrade to a Red Hat product release containing zstd-jni 1.5.7-14 or later when available.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.github.luben/zstd-jni: zstd-jni: Use-After-Free vulnerability allows memory corruption and denial of service"
},
{
"cve": "CVE-2026-89046",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-10T17:51:53.452234+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531577"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in zstd-jni. This out-of-bounds read vulnerability in the Zstd.getFrameContentSize function occurs because it fails to validate negative srcPosition arguments. A remote attacker can supply negative offset values, bypassing bounds checks and accessing the native frame-header parser. This can lead to out-of-bounds memory reads, resulting in information disclosure or a Java Virtual Machine (JVM) crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "zstd-jni: zstd-jni: Information disclosure or denial of service via out-of-bounds read",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat is aware of an out-of-bounds read in zstd-jni when a negative source position is supplied to Zstd.getFrameContentSize. This may disclose native memory or cause a JVM crash. Affected Red Hat products are tracked for updates containing zstd-jni 1.5.7-14 or later.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89046"
},
{
"category": "external",
"summary": "RHBZ#2531577",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531577"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89046",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89046"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89046",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89046"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni",
"url": "https://github.com/luben/zstd-jni"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/Zstd.java#L730",
"url": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/Zstd.java#L730"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/native/jni_zstd.c#L87",
"url": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/native/jni_zstd.c#L87"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/commit/dd08685ef913a32e76fb27f43470035c06758646",
"url": "https://github.com/luben/zstd-jni/commit/dd08685ef913a32e76fb27f43470035c06758646"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14",
"url": "https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/security/advisories/GHSA-rm53-6wf5-f34m",
"url": "https://github.com/luben/zstd-jni/security/advisories/GHSA-rm53-6wf5-f34m"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/zstd-jni-1.5.5-6-through-1.5.7-13-out-of-bounds-read-via-negative-offset",
"url": "https://www.vulncheck.com/advisories/zstd-jni-1.5.5-6-through-1.5.7-13-out-of-bounds-read-via-negative-offset"
}
],
"release_date": "2026-09-10T17:39:35.519000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Update to a product release containing zstd-jni 1.5.7-14 or later. Until updated, validate source positions and reject negative offsets before calling Zstd.getFrameContentSize. Do not pass attacker-controlled offsets to this method without validation.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "zstd-jni: zstd-jni: Information disclosure or denial of service via out-of-bounds read"
},
{
"cve": "CVE-2026-89407",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-09-22T20:07:47.987231+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2538720"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-core. An attacker can supply specially crafted JSON that, when deserialized into a numeric target type, triggers a Regular expression Denial of Service (ReDoS) vulnerability. This occurs due to quadratic backtracking in the NumberInput.looksLikeValidNumber() method\u0027s PATTERN_FLOAT regular expression. A small number of concurrent requests with a long input string can exhaust a server\u0027s request-handling thread pool, leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Moderate impact because while remote actors can induce CPU starvation to trigger a denial of service, the issue affects availability only without granting unauthorized access or data tampering capabilities. In Red Hat environments, exposure depends on services deserializing untrusted JSON payloads into numeric Java object types where default string coercion occurs. Older releases packaging jackson-core versions prior to 2.17.0 do not include the vulnerable pattern matching logic and are unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89407"
},
{
"category": "external",
"summary": "RHBZ#2538720",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538720"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89407",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89407"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89407",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89407"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/issues/1649",
"url": "https://github.com/FasterXML/jackson-core/issues/1649"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/pull/1650",
"url": "https://github.com/FasterXML/jackson-core/pull/1650"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/pull/1701",
"url": "https://github.com/FasterXML/jackson-core/pull/1701"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89",
"url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89"
}
],
"release_date": "2026-09-22T14:53:20.999000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking"
},
{
"cve": "CVE-2026-89425",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-09-23T02:30:57.997196+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2539084"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FasterXML jackson-core. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted, malformed token to the JsonFactory.createParser(DataInput) method. The UTF8DataInputJsonParser component, responsible for handling DataInput sources, does not properly limit the size of the error message generated for invalid tokens. This unbounded growth of the StringBuilder can consume excessive memory, leading to an OutOfMemoryError and crashing the Java Virtual Machine (JVM).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service flaw exists in FasterXML jackson-core where processing malformed JSON tokens from a DataInput source can lead to unbounded memory allocation. This vulnerability can exhaust system resources, causing a Java Virtual Machine (JVM) crash and impacting the availability of services that utilize the affected JsonFactory.createParser(DataInput) method with untrusted input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89425"
},
{
"category": "external",
"summary": "RHBZ#2539084",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539084"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89425",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89425"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89425",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89425"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/pull/1698",
"url": "https://github.com/FasterXML/jackson-core/pull/1698"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf",
"url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf"
}
],
"release_date": "2026-09-23T02:06:10.571000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.fasterxml.jackson.core/jackson-core: Jackson-core: Denial of Service via unbounded StringBuilder growth during malformed token processing"
},
{
"cve": "CVE-2026-90560",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-12T18:10:57.851894+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2532604"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in zstd-jni. This vulnerability, an out-of-bounds read, occurs in the ZstdDictDecompress constructor due to insufficient validation of offset and length arguments against dictionary array bounds. A remote attacker could exploit this by providing specially crafted input, leading to memory being read beyond its allocated buffer. This could result in the termination of the Java Virtual Machine (JVM), causing a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.github.luben/zstd-jni: zstd-jni: Denial of Service via out-of-bounds read in ZstdDictDecompress",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has determined that affected versions of zstd-jni are vulnerable to an out-of-bounds read in the ZstdDictDecompress constructor. An attacker who can cause an application to supply invalid dictionary offset or length values may terminate the Java Virtual Machine, resulting in denial of service. Red Hat is tracking fixes for affected products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-90560"
},
{
"category": "external",
"summary": "RHBZ#2532604",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2532604"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-90560",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-90560"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-90560",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90560"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni",
"url": "https://github.com/luben/zstd-jni"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/blob/v1.2.0/src/main/java/com/github/luben/zstd/ZstdDictDecompress.java#L37",
"url": "https://github.com/luben/zstd-jni/blob/v1.2.0/src/main/java/com/github/luben/zstd/ZstdDictDecompress.java#L37"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/ZstdDictDecompress.java#L49",
"url": "https://github.com/luben/zstd-jni/blob/v1.5.7-13/src/main/java/com/github/luben/zstd/ZstdDictDecompress.java#L49"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/commit/b74ab242d640c40897e62aab4c744ddfad1f915f",
"url": "https://github.com/luben/zstd-jni/commit/b74ab242d640c40897e62aab4c744ddfad1f915f"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/issues/405",
"url": "https://github.com/luben/zstd-jni/issues/405"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14",
"url": "https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/zstd-jni-1.2.0-through-1.5.7-13-out-of-bounds-read-via-zstddictdecompress",
"url": "https://www.vulncheck.com/advisories/zstd-jni-1.2.0-through-1.5.7-13-out-of-bounds-read-via-zstddictdecompress"
}
],
"release_date": "2026-09-12T18:06:43.794000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Until a fixed update is available, applications should validate that dictionary offset and length values are non-negative and that the requested range does not exceed the dictionary array. Apply product updates containing zstd-jni 1.5.7-14 or a Red Hat backport of the fix when available.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.github.luben/zstd-jni: zstd-jni: Denial of Service via out-of-bounds read in ZstdDictDecompress"
},
{
"cve": "CVE-2026-90852",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-09-15T02:41:02.899732+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533566"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in luben zstd-jni. This flaw involves a use-after-free vulnerability in the ZstdCompressCtx.loadDict function, which handles dictionary sharing. A remote attacker could exploit this by manipulating dictionary sharing operations, potentially leading to denial of service, information disclosure, or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.github.luben/zstd-jni: luben zstd-jni: Remote use-after-free vulnerability in dictionary sharing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important remote use-after-free vulnerability in the `zstd-jni` library\u0027s dictionary sharing functionality. The flaw, affecting the `ZstdCompressCtx.loadDict` function, could allow an unauthenticated attacker to trigger a crash or potentially execute arbitrary code due to public exploit disclosure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-90852"
},
{
"category": "external",
"summary": "RHBZ#2533566",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533566"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-90852",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-90852"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-90852",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90852"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/",
"url": "https://github.com/luben/zstd-jni/"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/commit/a560131d7834598afd9cea6b7c107bc88e915936",
"url": "https://github.com/luben/zstd-jni/commit/a560131d7834598afd9cea6b7c107bc88e915936"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/issues/404",
"url": "https://github.com/luben/zstd-jni/issues/404"
},
{
"category": "external",
"summary": "https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14",
"url": "https://github.com/luben/zstd-jni/releases/tag/v1.5.7-14"
},
{
"category": "external",
"summary": "https://vuldb.com/cve/CVE-2026-90852",
"url": "https://vuldb.com/cve/CVE-2026-90852"
},
{
"category": "external",
"summary": "https://vuldb.com/submit/927022",
"url": "https://vuldb.com/submit/927022"
},
{
"category": "external",
"summary": "https://vuldb.com/vuln/403407",
"url": "https://vuldb.com/vuln/403407"
},
{
"category": "external",
"summary": "https://vuldb.com/vuln/403407/cti",
"url": "https://vuldb.com/vuln/403407/cti"
}
],
"release_date": "2026-09-15T02:15:10.581000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.github.luben/zstd-jni: luben zstd-jni: Remote use-after-free vulnerability in dictionary sharing"
},
{
"cve": "CVE-2026-91777",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-09-23T02:31:01.024251+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2539085"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FasterXML jackson-databind. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing specially crafted JSON input to an application that deserializes it into an identity-enabled collection or map. The flaw occurs due to inefficient processing of forward-references, where the system performs a quadratic amount of work for linearly growing input, leading to excessive CPU consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in jackson-databind. Forward-reference completion for `@JsonIdentityInfo` object IDs in `CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference()` and the equivalent implementation in `MapDeserializer` performs a linear scan of the pending-reference accumulator for every resolved ID.\n\nWhen a document creates unresolved object-ID references in an identity-enabled collection or map and then defines those IDs in reverse order, completion performs quadratic CPU work, allowing an attacker to cause a Denial of Service by sending specially crafted JSON input.\n\nExploitation requires an application that deserializes attacker-influenced JSON into an `@JsonIdentityInfo`-annotated collection or map.\n\nThe fix replaces the repeated linear lookup with a keyed pending-reference structure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-91777"
},
{
"category": "external",
"summary": "RHBZ#2539085",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2539085"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-91777",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-91777"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-91777",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-91777"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/6204",
"url": "https://github.com/FasterXML/jackson-databind/issues/6204"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24"
}
],
"release_date": "2026-09-23T02:21:48.323000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Upgrade to a patched version. Refer to the advisory for the patched versions: https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24.\n\nExample `pom.xml`:\n```\n\u003cdependency\u003e\n \u003cgroupId\u003ecom.fasterxml.jackson.core\u003c/groupId\u003e\n \u003cartifactId\u003ejackson-databind\u003c/artifactId\u003e\n \u003cversion\u003e2.18.11\u003c/version\u003e\n\u003c/dependency\u003e\n```\n\nVerify: `mvn dependency:tree -Dincludes=com.fasterxml.jackson.core:jackson-databind`\n\nIf you cannot upgrade directly, apply defense-in-depth mitigations:\n- Restrict JSON request size\n- Audit and remove unnecessary @JsonIdentityInfo",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion"
},
{
"cve": "CVE-2026-92123",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-09-16T14:10:08.879013+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2535454"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Jenkins Script Security Plugin. Attackers with permissions to define and run sandboxed scripts, including Pipelines, can exploit this vulnerability. The plugin does not properly intercept operations performed on a null receiver, such as method calls or property accesses. This oversight allows an attacker to bypass the sandbox protection and execute arbitrary code within the Jenkins controller\u0027s Java Virtual Machine (JVM).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jenkins-script-security-plugin: org.jenkins-ci.plugins/script-security: jenkins-plugin/script-security: Jenkins Script Security Plugin: Arbitrary code execution via sandbox bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Jenkins Script Security Plugin. The plugin does not intercept operations performed on a null receiver (method calls, property and attribute accesses, and array accesses), allowing attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary code in the context of the Jenkins controller JVM.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-92123"
},
{
"category": "external",
"summary": "RHBZ#2535454",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535454"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-92123",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92123"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92123",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92123"
},
{
"category": "external",
"summary": "https://www.jenkins.io/security/advisory/2026-09-16/#SECURITY-3931",
"url": "https://www.jenkins.io/security/advisory/2026-09-16/#SECURITY-3931"
}
],
"release_date": "2026-09-16T13:53:03.803000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jenkins-script-security-plugin: org.jenkins-ci.plugins/script-security: jenkins-plugin/script-security: Jenkins Script Security Plugin: Arbitrary code execution via sandbox bypass"
},
{
"cve": "CVE-2026-92125",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2026-09-16T14:06:03.412072+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2535447"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Jenkins Script Security Plugin. Attackers with permissions to define and run sandboxed scripts, such as Pipelines, can exploit this vulnerability. By not properly rejecting the @GroovyASTTransformationClass annotation, an attacker can run an arbitrary Abstract Syntax Tree (AST) transformation at compile time. This bypasses the sandbox protection, leading to arbitrary code execution within the Jenkins controller Java Virtual Machine (JVM).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "org.jenkins-ci.plugins/script-security: Jenkins Script Security Plugin: Arbitrary code execution via Groovy AST transformation bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"known_not_affected": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-92125"
},
{
"category": "external",
"summary": "RHBZ#2535447",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535447"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-92125",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92125"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92125",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92125"
},
{
"category": "external",
"summary": "https://www.jenkins.io/security/advisory/2026-09-16/#SECURITY-3925%20(1)",
"url": "https://www.jenkins.io/security/advisory/2026-09-16/#SECURITY-3925%20(1)"
}
],
"release_date": "2026-09-16T13:53:05.022000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-22T08:48:40+00:00",
"details": "It is recommended that existing users of Red Hat OpenShift Developer Tools - OpenShift Jenkins 4-16 upgrade to the latest.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:88156"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a viable mitigation exists for this issue and has not been able to identify a practical workaround. Updating the affected packages to a fixed version is recommended.\nAs a defense-in-depth measure, restrict who can create and configure Jenkins Pipeline jobs.",
"product_ids": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:083d670f4381b6a0d361ac0c65d79e4345911d79ebcc17d90bbafc18bd03cde2_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:9d5fe0bd56e7c167a7daaa183af1ec5c1c7a5b6f112947049b92a6f592b133ff_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:b1aebb9beb425d687e64f88c7d8b645b272a2c136fe58f07d8acd6476f0d4c0c_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-agent-base-rhel9@sha256:c585bb77d12d59dff3614b90ee7d944e0ff8e4792f391fe79c54009440cb2c0d_ppc64le",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:1d29650794888ecc4e455b2e9588a1068cd602ee9079759599611c8dc1e2442f_arm64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:6df696cfde5dd9e20e654da5f1c68c0e9784545830702943cb48d5510109a6ad_amd64",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:89f5d0c3c54bbb3dd907a77693a127f62b5d415e4e1920a940b0cd57fca67e9e_s390x",
"OpenShift Developer Tools and Services 4.16:registry.redhat.io/ocp-tools-4/jenkins-rhel9@sha256:a77e3be5f3fffeee0cb7cb3fba2f3f8529d279757e52aab6fb0ba35bb4f9b1fd_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "org.jenkins-ci.plugins/script-security: Jenkins Script Security Plugin: Arbitrary code execution via Groovy AST transformation bypass"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.