RHSA-2026:92593
Vulnerability from csaf_redhat - Published: 2026-10-29 16:57 - Updated: 2026-11-03 00:08Summary
Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.6.2
Severity
Important
Notes
Topic: Logging for Red Hat OpenShift - 6.6.2
Details: Red Hat OpenShift Logging 6.6.2 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64 | — |
Vendor Fix
fix
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Vector. The Logstash source component allocates memory based on a network-declared frame length without enforcing an upper limit. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted frame that declares an excessively large payload size, triggering excessive memory allocation. This issue can cause process termination or an out-of-memory crash, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x | — |
Vendor Fix
fix
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le | — |
Threats
Impact
Important
A flaw was found in gRPC-Go. This vulnerability allows an unauthenticated remote attacker to exhaust process memory by sending millions of fragmented HTTP/2 DATA frames. Each fragmented frame is stored as a separate message, consuming disproportionate heap memory. This can lead to a runtime panic or out-of-memory termination, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-42499
Known not affected
30 products, the same list as for
CVE-2026-42499
Threats
Impact
Important
A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x | — |
Threats
Impact
Important
References
62 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Logging for Red Hat OpenShift - 6.6.2",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Logging 6.6.2 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:92593",
"url": "https://access.redhat.com/errata/RHSA-2026:92593"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63209",
"url": "https://access.redhat.com/security/cve/CVE-2026-63209"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-77619",
"url": "https://access.redhat.com/security/cve/CVE-2026-77619"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84304",
"url": "https://access.redhat.com/security/cve/CVE-2026-84304"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
"url": "https://access.redhat.com/security/cve/CVE-2026-84445"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92593.json"
}
],
"title": "Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.6.2",
"tracking": {
"current_release_date": "2026-11-03T00:08:51+00:00",
"generator": {
"date": "2026-11-03T00:08:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.4"
}
},
"id": "RHSA-2026:92593",
"initial_release_date": "2026-10-29T16:57:59+00:00",
"revision_history": [
{
"date": "2026-10-29T16:57:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-29T16:58:05+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-03T00:08:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Logging Subsystem for Red Hat OpenShift 6.6",
"product": {
"name": "Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:logging:6.6::el9"
}
}
}
],
"category": "product_family",
"name": "Logging Subsystem for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Ac371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1793051087"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-operator-bundle@sha256%3Ab444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=1793055212"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1792998256"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1793002483"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3Aa5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1793041359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1793051099"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-operator-bundle@sha256%3A82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=1793055216"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1792906475"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1793051110"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1793051738"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1793051087"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1792998256"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1793002483"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1793041359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3Ae0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1793051099"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1792906475"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1793051110"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1793051738"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Aa1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1793051087"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3Af7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1792998256"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Aba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1793002483"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1793041359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3Ac823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1793051099"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Af19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1792906475"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Acf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1793051110"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1793051738"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3A76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1793051087"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1792998256"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1793002483"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1793041359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1793051099"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Adfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1792906475"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Abf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1793051110"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1793051738"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.6",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-41178",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-04T16:01:10.300537+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484830"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "RHBZ#2484830",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
"url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
}
],
"release_date": "2026-06-04T14:38:23.707000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:57:59+00:00",
"details": "For OpenShift Container Platform 4.22 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/ocp-4-22-release-notes\n\nFor Red Hat OpenShift Logging 6.6, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.6",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92593"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:57:59+00:00",
"details": "For OpenShift Container Platform 4.22 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/ocp-4-22-release-notes\n\nFor Red Hat OpenShift Logging 6.6, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.6",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92593"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-63209",
"cwe": {
"id": "CWE-823",
"name": "Use of Out-of-range Pointer Offset"
},
"discovery_date": "2026-09-29T15:12:15.658458+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543236"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has rated this vulnerability as having an impact of Important because an unauthenticated remote attacker could trigger a denial of service by causing a process crash without requiring elevated permissions. In Red Hat environments where this Go library is embedded, exploitation requires that an application accepts untrusted dictionary structures for S2 compression and subsequently attempts encoding. Although the resulting memory access fault terminates the vulnerable process, the flaw is confined to process crashes and does not compromise data confidentiality or integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63209"
},
{
"category": "external",
"summary": "RHBZ#2543236",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543236"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63209",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63209"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536",
"url": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/releases/tag/v1.18.7",
"url": "https://github.com/klauspost/compress/releases/tag/v1.18.7"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
"url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw"
}
],
"release_date": "2026-09-29T14:58:53.366000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:57:59+00:00",
"details": "For OpenShift Container Platform 4.22 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/ocp-4-22-release-notes\n\nFor Red Hat OpenShift Logging 6.6, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.6",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92593"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing"
},
{
"cve": "CVE-2026-77619",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-22T21:45:39.938827+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2538945"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vector. The Logstash source component allocates memory based on a network-declared frame length without enforcing an upper limit. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted frame that declares an excessively large payload size, triggering excessive memory allocation. This issue can cause process termination or an out-of-memory crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vector: Vector: Denial of Service via unbounded memory allocation in Logstash source",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because an unauthenticated remote attacker can crash the Vector collector process with minimal effort, disrupting log aggregation across multi-tenant environments. Exploitation requires that Vector is configured with the Logstash source enabled and accessible over the network. In OpenShift Logging deployments, Vector instances commonly collect and route cluster logs, meaning that an interruption of this pipeline halts log ingestion and visibility without requiring elevated privileges.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-77619"
},
{
"category": "external",
"summary": "RHBZ#2538945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538945"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-77619",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77619"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77619",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77619"
},
{
"category": "external",
"summary": "https://github.com/vectordotdev/vector/commit/3162ed1a2e5e8d3f210134607518a26aa01e1a37",
"url": "https://github.com/vectordotdev/vector/commit/3162ed1a2e5e8d3f210134607518a26aa01e1a37"
},
{
"category": "external",
"summary": "https://github.com/vectordotdev/vector/pull/25819",
"url": "https://github.com/vectordotdev/vector/pull/25819"
},
{
"category": "external",
"summary": "https://github.com/vectordotdev/vector/releases/tag/v0.57.0",
"url": "https://github.com/vectordotdev/vector/releases/tag/v0.57.0"
},
{
"category": "external",
"summary": "https://github.com/vectordotdev/vector/security/advisories/GHSA-rrfg-9487-mhp6",
"url": "https://github.com/vectordotdev/vector/security/advisories/GHSA-rrfg-9487-mhp6"
}
],
"release_date": "2026-09-22T15:15:45.066000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:57:59+00:00",
"details": "For OpenShift Container Platform 4.22 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/ocp-4-22-release-notes\n\nFor Red Hat OpenShift Logging 6.6, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.6",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92593"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vector: Vector: Denial of Service via unbounded memory allocation in Logstash source"
},
{
"cve": "CVE-2026-84304",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-01T18:41:15.538515+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2526955"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go. This vulnerability allows an unauthenticated remote attacker to exhaust process memory by sending millions of fragmented HTTP/2 DATA frames. Each fragmented frame is stored as a separate message, consuming disproportionate heap memory. This can lead to a runtime panic or out-of-memory termination, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc: gRPC-Go: Denial of Service via HTTP/2 DATA Frame Fragmentation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has evaluated this vulnerability as having an Important severity because an unauthenticated remote attacker can exhaust memory and crash affected applications without exceeding connection flow-control windows. Within Red Hat OpenShift and containerized platforms, gRPC-Go is embedded in various internal control plane agents, monitoring exporters, and management components. Although services handling untrusted remote gRPC traffic remain susceptible to denial of service, exposure in standard cluster deployments is constrained because these interfaces typically operate across isolated internal networks or behind mutual TLS boundaries.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84304"
},
{
"category": "external",
"summary": "RHBZ#2526955",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526955"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84304",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84304"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84304",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84304"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/7354d9c8debb4bcf2225bf429857078de310c176",
"url": "https://github.com/grpc/grpc-go/commit/7354d9c8debb4bcf2225bf429857078de310c176"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/8cfeca0e1ee5ea0980dcc320e20240fa1079ec77",
"url": "https://github.com/grpc/grpc-go/commit/8cfeca0e1ee5ea0980dcc320e20240fa1079ec77"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9331",
"url": "https://github.com/grpc/grpc-go/pull/9331"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9333",
"url": "https://github.com/grpc/grpc-go/pull/9333"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.1",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.1"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-vp52-pcj8-j9qc",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-vp52-pcj8-j9qc"
}
],
"release_date": "2026-09-01T18:19:10.100000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:57:59+00:00",
"details": "For OpenShift Container Platform 4.22 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/ocp-4-22-release-notes\n\nFor Red Hat OpenShift Logging 6.6, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.6",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92593"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc: gRPC-Go: Denial of Service via HTTP/2 DATA Frame Fragmentation"
},
{
"cve": "CVE-2026-84445",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-14T16:22:17.356407+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533175"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity impact because an unauthenticated remote client can crash the host daemon, causing an immediate denial of service across exposed endpoints. The issue specifically threatens deployments utilizing xDS-managed gRPC servers, as requests that omit standard routing authority parameters cause the application to crash on an unhandled slice lookup. Standard gRPC server implementations that do not configure xDS control plane routing are not susceptible to this failure mode. Furthermore, in environments enforcing mutual transport layer security (mTLS), successful transport authentication is required before reaching the vulnerable routing stage, restricting potential exploitation to authenticated peers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84445"
},
{
"category": "external",
"summary": "RHBZ#2533175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
"url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
"url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
"url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/issues/9354",
"url": "https://github.com/grpc/grpc-go/issues/9354"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9365",
"url": "https://github.com/grpc/grpc-go/pull/9365"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9366",
"url": "https://github.com/grpc/grpc-go/pull/9366"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9367",
"url": "https://github.com/grpc/grpc-go/pull/9367"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
}
],
"release_date": "2026-09-14T16:11:41.401000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:57:59+00:00",
"details": "For OpenShift Container Platform 4.22 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/ocp-4-22-release-notes\n\nFor Red Hat OpenShift Logging 6.6, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.6",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92593"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:b444a79c81208d34a06c41cf6ea7a606e245b2cdb97334f8bb091d1df2d19eda_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:2ae391bf651c054c426289f967c76e0750bb0039f1c608497610a667fac144c4_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:76ed595a040faa5a652c4886727bb54fd5edea8a28c2cd36aeccb59d668afb86_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a1f1e08e570ea2ccd820725cab47c2f9ef924f5806f948e6248bc01d44d32b55_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:c371f17bd41e5d956f2008e02da66ef56afd278d2dddfe9e5259e69df213af3f_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:4d8f1be1ec266677afbdd44e5f9f1cb784b9696fb87014498196252cdd4dbdba_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:7ab4adeb9429e0517e9251ab8029f222b79dfcb7b413e315e1b007dc6f0532e9_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9e862945a27bd4085d299833d694b40c6be57862c2a14ec0dba3693cbcf17dbb_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:f7aa837b7661eca4d5960008987b4abaa2d3acfbc9fe39f30190bced7ed61614_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:566f18082eda274cf60d59cfca8f059cbf93a6bfec7df3dd4a06af5fb4b3cf00_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:6dbf0a445a26f5aa93fc2439613526ac0b79c2c438dcef564b1cac4c3665b46a_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:772b91eb27d39bdba29a07729b1a1e6ae4ff765edfdf548d402d1596de65413a_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba2e8f995185fae4ff388af5c9313709d28e47f1691eeb617684076953258b7e_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:13a6d2d8840719b176de2880a48e4ed761e89e77c8fa2f6b81b9bb5e77029484_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:1751553f7e03497fe4ff9f287f847c0578125be45f7fee3fd48347dfb65489a6_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:905713951f82dfaf084e1f601cdaf5ff4a766d03ef535c540a4daaeb10aaea3d_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:a5f9407687ec626d5d870bb77e26080c39efa998f955544ca80aa6cd82bf8999_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:82ffa6498ba70fac3b01b6eaf548f614c78d7371da7e22a388dd29a1e87b2048_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:95bef3a1209f74af17f7f4bfa0f2620d9694b426dccdd95077831770c41ea139_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:9f96903847ac3f5be93da613625c24aafd6414c1b9ebe7cd521bc54a367dc940_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:c823b7d6f419e50aeedcb0f3dbb35787950ed875cc3bb0f695a06c3a3dca2610_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:e0edcd49af099f677e8f35d890e8b81cb3477984876c576739a88a1787a3c98b_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:3c83364e5e695705c02ab6cb2071c200e0b11ae9b393baf89c4fb414daabd8ed_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d6be12455d1579543e3f509f8efb6473aabd4c0081824a90317ae8d2cd61f34_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:dfcdb296ff44e648e51a8a6b2cdcd61319304ed937638452162c5a9a46a024c0_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:f19386db32825d9578539b96e5ee89000b0dd78b848702192fce8abff16ab08c_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:490f6c904e0f57503049e3c77357ba50455a92577d9573eba0b01d9981e25992_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:843ac3d242c4727cfe042e3a2be580df8db392e40661c8e17258dff978490298_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:bf925edf2e35ca07fc85ebc7e78483bf0775dc38666121d2cbd505565077f9b4_s390x",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:cf96d7ce2430d9beb65f3ea194fdb8ebfeb456fba388fb849136920bf15ff5e7_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:0b91461702137ed411702b7d445b6f93c79d25d22a055af70e0a45ea30945290_amd64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:1ce30f46c573b68dbf8b5925cb868944ba80d0f6f4d00d1a681499656c37f10f_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:69b7ff95b558cecbb5f23c688388dc899d9ea0931615b125eff20dc90e4b3796_arm64",
"Logging Subsystem for Red Hat OpenShift 6.6:registry.redhat.io/openshift-logging/vector-rhel9@sha256:818488b3c9daa70b5fb11710aa624e4087df20ed596c0167614c8155918c4e59_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.