RHSA-2026:92621
Vulnerability from csaf_redhat - Published: 2026-10-29 19:58 - Updated: 2026-10-30 00:50Summary
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
Severity
Important
Notes
Topic: An update is now available for Red Hat Ansible Automation Platform 2.6
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Red Hat Ansible Automation Platform provides an enterprise framework for
building, deploying and managing IT automation at scale. IT Managers can
provide top-down guidelines on how automation is applied to individual
teams, while automation developers retain the freedom to write tasks that
leverage existing knowledge without the overhead. Ansible Automation
Platform makes it possible for users across an organization to share, vet,
and manage automation content by means of a simple, powerful, and agentless
language.
Security Fix(es):
* receptor: net/http: Denial of Service via excessive HTTP/2 SETTINGS
frames (CVE-2026-78669)
* receptor: golang: Denial of Service via crafted HTTP Range headers
(CVE-2026-78667)
* receptor: crypto/tls: Denial of Service via multiple ECH outer extension
references (CVE-2026-97031)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
For details about this release, refer to the release notes listed in the
References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service (DoS) by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU resources, rendering the application unresponsive to legitimate users.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.9-3.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.9-3.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.s390x | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el10ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.9-3.el9ap.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.aarch64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.ppc64le | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.s390x | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el9ap.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive.
7.5 (High)
Affected products
Fixed
12 products, the same list as for
CVE-2026-78667
Known not affected
20 products, the same list as for
CVE-2026-78667
Threats
Impact
Important
A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello (ECH) outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a Denial of Service (DoS) through server crashes or unresponsiveness.
7.5 (High)
Affected products
Fixed
12 products, the same list as for
CVE-2026-78667
Known not affected
20 products, the same list as for
CVE-2026-78667
Threats
Impact
Important
References
32 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat Ansible Automation Platform 2.6\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Ansible Automation Platform provides an enterprise framework for\nbuilding, deploying and managing IT automation at scale. IT Managers can\nprovide top-down guidelines on how automation is applied to individual\nteams, while automation developers retain the freedom to write tasks that\nleverage existing knowledge without the overhead. Ansible Automation\nPlatform makes it possible for users across an organization to share, vet,\nand manage automation content by means of a simple, powerful, and agentless\nlanguage.\n\nSecurity Fix(es):\n\n* receptor: net/http: Denial of Service via excessive HTTP/2 SETTINGS\nframes (CVE-2026-78669)\n* receptor: golang: Denial of Service via crafted HTTP Range headers\n(CVE-2026-78667)\n* receptor: crypto/tls: Denial of Service via multiple ECH outer extension\nreferences (CVE-2026-97031)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nFor details about this release, refer to the release notes listed in the\nReferences section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:92621",
"url": "https://access.redhat.com/errata/RHSA-2026:92621"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/whats_new-async_updates",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/whats_new-async_updates"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade"
},
{
"category": "external",
"summary": "2548334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548334"
},
{
"category": "external",
"summary": "2548336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548336"
},
{
"category": "external",
"summary": "2548344",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548344"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92621.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update",
"tracking": {
"current_release_date": "2026-10-30T00:50:43+00:00",
"generator": {
"date": "2026-10-30T00:50:43+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.3"
}
},
"id": "RHSA-2026:92621",
"initial_release_date": "2026-10-29T19:58:31+00:00",
"revision_history": [
{
"date": "2026-10-29T19:58:31+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-29T19:58:31+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-30T00:50:43+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product": {
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product": {
"name": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_automation_platform:2.6::el10"
}
}
}
],
"category": "product_family",
"name": "Red Hat Ansible Automation Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "receptor-0:1.6.9-3.el9ap.src",
"product": {
"name": "receptor-0:1.6.9-3.el9ap.src",
"product_id": "receptor-0:1.6.9-3.el9ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.9-3.el9ap?arch=src"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.9-3.el10ap.src",
"product": {
"name": "receptor-0:1.6.9-3.el10ap.src",
"product_id": "receptor-0:1.6.9-3.el10ap.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.9-3.el10ap?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "receptor-0:1.6.9-3.el9ap.x86_64",
"product": {
"name": "receptor-0:1.6.9-3.el9ap.x86_64",
"product_id": "receptor-0:1.6.9-3.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.9-3.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"product": {
"name": "receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"product_id": "receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.9-3.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"product": {
"name": "receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"product_id": "receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.9-3.el9ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.9-3.el10ap.x86_64",
"product": {
"name": "receptor-0:1.6.9-3.el10ap.x86_64",
"product_id": "receptor-0:1.6.9-3.el10ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.9-3.el10ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"product": {
"name": "receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"product_id": "receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.9-3.el10ap?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"product": {
"name": "receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"product_id": "receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.9-3.el10ap?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "receptor-0:1.6.9-3.el9ap.ppc64le",
"product": {
"name": "receptor-0:1.6.9-3.el9ap.ppc64le",
"product_id": "receptor-0:1.6.9-3.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.9-3.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"product": {
"name": "receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"product_id": "receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.9-3.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"product": {
"name": "receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"product_id": "receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.9-3.el9ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.9-3.el10ap.ppc64le",
"product": {
"name": "receptor-0:1.6.9-3.el10ap.ppc64le",
"product_id": "receptor-0:1.6.9-3.el10ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.9-3.el10ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"product": {
"name": "receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"product_id": "receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.9-3.el10ap?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"product": {
"name": "receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"product_id": "receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.9-3.el10ap?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "receptor-0:1.6.9-3.el9ap.s390x",
"product": {
"name": "receptor-0:1.6.9-3.el9ap.s390x",
"product_id": "receptor-0:1.6.9-3.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.9-3.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"product": {
"name": "receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"product_id": "receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.9-3.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"product": {
"name": "receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"product_id": "receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.9-3.el9ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.9-3.el10ap.s390x",
"product": {
"name": "receptor-0:1.6.9-3.el10ap.s390x",
"product_id": "receptor-0:1.6.9-3.el10ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.9-3.el10ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"product": {
"name": "receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"product_id": "receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.9-3.el10ap?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"product": {
"name": "receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"product_id": "receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.9-3.el10ap?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "receptor-0:1.6.9-3.el9ap.aarch64",
"product": {
"name": "receptor-0:1.6.9-3.el9ap.aarch64",
"product_id": "receptor-0:1.6.9-3.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.9-3.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"product": {
"name": "receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"product_id": "receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.9-3.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"product": {
"name": "receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"product_id": "receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.9-3.el9ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-0:1.6.9-3.el10ap.aarch64",
"product": {
"name": "receptor-0:1.6.9-3.el10ap.aarch64",
"product_id": "receptor-0:1.6.9-3.el10ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor@1.6.9-3.el10ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"product": {
"name": "receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"product_id": "receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debugsource@1.6.9-3.el10ap?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"product": {
"name": "receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"product_id": "receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptor-debuginfo@1.6.9-3.el10ap?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "receptorctl-0:1.6.9-3.el9ap.noarch",
"product": {
"name": "receptorctl-0:1.6.9-3.el9ap.noarch",
"product_id": "receptorctl-0:1.6.9-3.el9ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptorctl@1.6.9-3.el9ap?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "receptorctl-0:1.6.9-3.el10ap.noarch",
"product": {
"name": "receptorctl-0:1.6.9-3.el10ap.noarch",
"product_id": "receptorctl-0:1.6.9-3.el10ap.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/receptorctl@1.6.9-3.el10ap?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.9-3.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.aarch64"
},
"product_reference": "receptor-0:1.6.9-3.el10ap.aarch64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.9-3.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.ppc64le"
},
"product_reference": "receptor-0:1.6.9-3.el10ap.ppc64le",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.9-3.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.s390x"
},
"product_reference": "receptor-0:1.6.9-3.el10ap.s390x",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.9-3.el10ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.src"
},
"product_reference": "receptor-0:1.6.9-3.el10ap.src",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.9-3.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.x86_64"
},
"product_reference": "receptor-0:1.6.9-3.el10ap.x86_64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.9-3.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64"
},
"product_reference": "receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le"
},
"product_reference": "receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.9-3.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.s390x"
},
"product_reference": "receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.9-3.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64"
},
"product_reference": "receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.9-3.el10ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.aarch64"
},
"product_reference": "receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.9-3.el10ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.ppc64le"
},
"product_reference": "receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.9-3.el10ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.s390x"
},
"product_reference": "receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.9-3.el10ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.x86_64"
},
"product_reference": "receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.9-3.el10ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"product_id": "10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el10ap.noarch"
},
"product_reference": "receptorctl-0:1.6.9-3.el10ap.noarch",
"relates_to_product_reference": "10Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.9-3.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.9-3.el9ap.src"
},
"product_reference": "receptor-0:1.6.9-3.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.9-3.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.9-3.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.9-3.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.9-3.el9ap.src"
},
"product_reference": "receptor-0:1.6.9-3.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.9-3.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.9-3.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Inside-1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.9-3.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.aarch64"
},
"product_reference": "receptor-0:1.6.9-3.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.9-3.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.ppc64le"
},
"product_reference": "receptor-0:1.6.9-3.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.9-3.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.s390x"
},
"product_reference": "receptor-0:1.6.9-3.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.9-3.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.src"
},
"product_reference": "receptor-0:1.6.9-3.el9ap.src",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-0:1.6.9-3.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.x86_64"
},
"product_reference": "receptor-0:1.6.9-3.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.9-3.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64"
},
"product_reference": "receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le"
},
"product_reference": "receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.9-3.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.s390x"
},
"product_reference": "receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debuginfo-0:1.6.9-3.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64"
},
"product_reference": "receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.9-3.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.aarch64"
},
"product_reference": "receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.9-3.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.ppc64le"
},
"product_reference": "receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.9-3.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.s390x"
},
"product_reference": "receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptor-debugsource-0:1.6.9-3.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.x86_64"
},
"product_reference": "receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "receptorctl-0:1.6.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"product_id": "9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el9ap.noarch"
},
"product_reference": "receptorctl-0:1.6.9-3.el9ap.noarch",
"relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-78667",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-08T23:00:51.418048+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548334"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go net/http package. A remote attacker can cause a Denial of Service (DoS) by sending an HTTP request containing a Range header with a large number of small byte ranges. When the server processes these ranges while serving content, it consumes an excessive amount of CPU resources, rendering the application unresponsive to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated with an Important severity for Red Hat products because an unauthenticated remote attacker can exhaust server compute resources over the network, leading to a complete service outage. Across Red Hat enterprise environments, Go is widely deployed in container runtimes, monitoring daemons, and OpenShift infrastructure components. However, exploitation is restricted to applications that actively listen on the network and serve content using standard library HTTP handlers that process multi-range requests. CLI utilities and server components that do not handle byte-range requests from untrusted clients remain unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.x86_64"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-78667"
},
{
"category": "external",
"summary": "RHBZ#2548334",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548334"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-78667",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78667"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78667",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78667"
},
{
"category": "external",
"summary": "https://go.dev/cl/847309",
"url": "https://go.dev/cl/847309"
},
{
"category": "external",
"summary": "https://go.dev/issue/81858",
"url": "https://go.dev/issue/81858"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
"url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6609",
"url": "https://pkg.go.dev/vuln/GO-2026-6609"
}
],
"release_date": "2026-10-08T22:53:59.148000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T19:58:31+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92621"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http: golang: golang: Denial of Service via crafted HTTP Range headers"
},
{
"cve": "CVE-2026-78669",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-08T23:01:28.964317+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548344"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service (DoS) by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration (SETTINGS) frames that modify window sizes, an attacker forces the system into intensive state processing. This resource exhaustion degrades performance and can render the service unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go net/http package and the golang.org/x/net/http2 module. A malicious HTTP/2 peer can cause excessive CPU consumption by opening a large number of HTTP/2 streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values. Each SETTINGS frame forces the server or client to iterate over all open streams to adjust their flow-control windows, resulting in quadratic CPU usage and denial of service.\n\nThis vulnerability affects all Go programs that serve or consume HTTP/2 traffic using net/http or golang.org/x/net/http2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.x86_64"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-78669"
},
{
"category": "external",
"summary": "RHBZ#2548344",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548344"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-78669",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-78669"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-78669",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78669"
},
{
"category": "external",
"summary": "https://go.dev/cl/847186",
"url": "https://go.dev/cl/847186"
},
{
"category": "external",
"summary": "https://go.dev/cl/847308",
"url": "https://go.dev/cl/847308"
},
{
"category": "external",
"summary": "https://go.dev/issue/81742",
"url": "https://go.dev/issue/81742"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
"url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs",
"url": "https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6611",
"url": "https://pkg.go.dev/vuln/GO-2026-6611"
}
],
"release_date": "2026-10-08T22:53:59.530000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T19:58:31+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92621"
},
{
"category": "workaround",
"details": "In case you consume HTTP2, upgrade to a patched version of the http module.\n\nVerify:\n```\ngo version\ngo list -m golang.org/x/net\ngovulncheck ./...\n```",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames"
},
{
"cve": "CVE-2026-97031",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-10-08T23:00:59.284728+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el9ap.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2548336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in crypto/tls. A remote attacker can trigger this vulnerability by sending a specially crafted packet containing multiple Encrypted Client Hello (ECH) outer extension references to a server. Processing these unauthorized references leads to excessive memory consumption, causing a Denial of Service (DoS) through server crashes or unresponsiveness.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity flaw because an unauthenticated remote attacker can trigger memory exhaustion and crash server processes without requiring privileges or user interaction. Go applications that terminate TLS connections and accept Encrypted Client Hello configurations are vulnerable to resource amplification during the initial handshake. While the flaw does not facilitate arbitrary code execution or compromise data confidentiality, the resulting denial of service can disrupt critical network services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.x86_64"
],
"known_not_affected": [
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el9ap.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-97031"
},
{
"category": "external",
"summary": "RHBZ#2548336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2548336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-97031",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-97031"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97031",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97031"
},
{
"category": "external",
"summary": "https://go.dev/cl/847312",
"url": "https://go.dev/cl/847312"
},
{
"category": "external",
"summary": "https://go.dev/issue/81855",
"url": "https://go.dev/issue/81855"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI",
"url": "https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6607",
"url": "https://pkg.go.dev/vuln/GO-2026-6607"
}
],
"release_date": "2026-10-08T22:53:58.775000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T19:58:31+00:00",
"details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92621"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el9ap.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.src",
"10Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.aarch64",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.ppc64le",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.s390x",
"10Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el10ap.x86_64",
"10Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el10ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Developer-1.3:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6-Inside-1.4:receptorctl-0:1.6.9-3.el9ap.noarch",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.src",
"9Base-Ansible-Automation-Platform-2.6:receptor-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debuginfo-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.aarch64",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.ppc64le",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.s390x",
"9Base-Ansible-Automation-Platform-2.6:receptor-debugsource-0:1.6.9-3.el9ap.x86_64",
"9Base-Ansible-Automation-Platform-2.6:receptorctl-0:1.6.9-3.el9ap.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension references"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.