RHSA-2026:96293
Vulnerability from csaf_redhat - Published: 2026-11-09 12:54 - Updated: 2026-11-13 15:00Summary
Red Hat Security Advisory: Red Hat Edge Manager Version 1.3.2 Security Update
Severity
Important
Notes
Topic: Red Hat Edge Manager Version 1.3.2 Security Update
Details: Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused
management of edge devices and applications. It supports image-mode RHEL and
container workloads that run on Podman/Docker or Kubernetes.
RHEM is now available as a standalone feature, providing greater flexibility for
edge deployments. In addition to the standalone version, RHEM continues to be
offered as a plugin for the following platforms:
* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge
devices.
* Red Hat Ansible Automation Platform (AAP): Integrates edge management with
Ansible automation.
This integration enables organizations to optimize the management and
orchestration of their fleets of edge devices; whether its thousands of
dispersed retail point-of-sale systems or industrial machinery on remote factory
floors.
Value for customers and partners:
* This solution not only helps customers manage thousands of devices but helps
scale operations.
* To manage large-scale deployments, customers need to be able to integrate with
their existing management systems, support remote configuration and over-the-air
updates, and collect telemetry data for advanced analytics.
* Red Hat Edge Manager offers a simple and security-focused lifecycle
management, from onboarding to decommissioning of edge devices.
This complete end-to-end solution empowers organizations to gain the most value
from the fleets of devices that generate data, all from a centralized location.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.
7.5 (High)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64 | — |
Vendor Fix
fix
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64 | — | ||
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64 | — |
Threats
Impact
Important
A flaw was found in flightctl. The configureRepoHTTPSClient() function in the device-render worker builds a per-repository tls.Config (which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates) and installs it into go-git's process-global client.Protocols map via gitclient.InstallProtocol("https", ...). Because the worker renders devices for multiple organizations concurrently from a shared goroutine pool, whichever tenant's repository configuration is written last wins for all in-flight git.Clone calls. This race condition can cause one tenant's TLS settings, including InsecureSkipVerify or mTLS client credentials, to leak into another tenant's git operations.
6.6 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service (DoS) by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the application to crash.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
26 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64 | — |
Workaround
|
Threats
Impact
Important
References
34 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Edge Manager Version 1.3.2 Security Update",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Edge Manager (RHEM) provides simple, scalable, and security-focused\nmanagement of edge devices and applications. It supports image-mode RHEL and\ncontainer workloads that run on Podman/Docker or Kubernetes.\n\nRHEM is now available as a standalone feature, providing greater flexibility for\nedge deployments. In addition to the standalone version, RHEM continues to be\noffered as a plugin for the following platforms:\n\n* Red Hat Advanced Cluster Management (RHACM): Extends fleet management to edge\ndevices.\n* Red Hat Ansible Automation Platform (AAP): Integrates edge management with\nAnsible automation.\n\nThis integration enables organizations to optimize the management and\norchestration of their fleets of edge devices; whether its thousands of\ndispersed retail point-of-sale systems or industrial machinery on remote factory\nfloors.\n\nValue for customers and partners:\n\n* This solution not only helps customers manage thousands of devices but helps\nscale operations.\n* To manage large-scale deployments, customers need to be able to integrate with\ntheir existing management systems, support remote configuration and over-the-air\nupdates, and collect telemetry data for advanced analytics.\n* Red Hat Edge Manager offers a simple and security-focused lifecycle\nmanagement, from onboarding to decommissioning of edge devices.\n\nThis complete end-to-end solution empowers organizations to gain the most value\nfrom the fleets of devices that generate data, all from a centralized location.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:96293",
"url": "https://access.redhat.com/errata/RHSA-2026:96293"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102278",
"url": "https://access.redhat.com/security/cve/CVE-2026-102278"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
"url": "https://access.redhat.com/security/cve/CVE-2026-84445"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-92615",
"url": "https://access.redhat.com/security/cve/CVE-2026-92615"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/edge_manager/index#edge-mgr-intro"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/managing_device_fleets_with_the_red_hat_edge_manager/assembly-edge-manager-intro"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_96293.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Edge Manager Version 1.3.2 Security Update",
"tracking": {
"current_release_date": "2026-11-13T15:00:59+00:00",
"generator": {
"date": "2026-11-13T15:00:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.6"
}
},
"id": "RHSA-2026:96293",
"initial_release_date": "2026-11-09T12:54:47+00:00",
"revision_history": [
{
"date": "2026-11-09T12:54:47+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-11-09T12:54:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-13T15:00:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Edge Manager 1.3",
"product": {
"name": "Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:edge_manager:1.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Edge Manager"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel9@sha256%3A1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel9\u0026tag=1793975794"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel9@sha256%3A83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9\u0026tag=1793976343"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel9@sha256%3Aa91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel9\u0026tag=1793976192"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel9@sha256%3Aeb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9\u0026tag=1793975947"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel9@sha256%3Ac8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel9\u0026tag=1793976273"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-api-rhel9@sha256%3A7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9\u0026tag=1793975710"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-worker-rhel9@sha256%3A7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9\u0026tag=1793976159"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel9@sha256%3Ad1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel9\u0026tag=1793976011"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel9@sha256%3Ab787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel9\u0026tag=1793976255"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-remote-access-rhel9@sha256%3Adda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-remote-access-rhel9\u0026tag=1793975903"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel9@sha256%3A1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9\u0026tag=1793975713"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel9@sha256%3A0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel9\u0026tag=1793975617"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel9@sha256%3A9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel9\u0026tag=1793975599"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel9@sha256%3A26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9\u0026tag=1793976271"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel9@sha256%3Abeeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82?arch=amd64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel9\u0026tag=1793976043"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alert-exporter-rhel9@sha256%3A435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alert-exporter-rhel9\u0026tag=1793975794"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-alertmanager-proxy-rhel9@sha256%3A586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9\u0026tag=1793976343"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-api-rhel9@sha256%3Ad26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-api-rhel9\u0026tag=1793976192"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-cli-artifacts-rhel9@sha256%3Aac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9\u0026tag=1793975947"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-db-setup-rhel9@sha256%3A49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-db-setup-rhel9\u0026tag=1793976273"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-api-rhel9@sha256%3A7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9\u0026tag=1793975710"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-imagebuilder-worker-rhel9@sha256%3Acd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9\u0026tag=1793976159"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-pam-issuer-rhel9@sha256%3Ab24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-pam-issuer-rhel9\u0026tag=1793976011"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-periodic-rhel9@sha256%3Ab58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-periodic-rhel9\u0026tag=1793976255"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-remote-access-rhel9@sha256%3A7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-remote-access-rhel9\u0026tag=1793975903"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-telemetry-gateway-rhel9@sha256%3A89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9\u0026tag=1793975713"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-ocp-rhel9@sha256%3Aceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-ocp-rhel9\u0026tag=1793975617"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-ui-rhel9@sha256%3A586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-ui-rhel9\u0026tag=1793975599"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-userinfo-proxy-rhel9@sha256%3A1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9\u0026tag=1793976271"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"product": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"product_id": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/flightctl-worker-rhel9@sha256%3A0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6?arch=arm64\u0026repository_url=registry.redhat.io/rhem/flightctl-worker-rhel9\u0026tag=1793976043"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64 as a component of Red Hat Edge Manager 1.3",
"product_id": "Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64"
},
"product_reference": "registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64",
"relates_to_product_reference": "Red Hat Edge Manager 1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-84445",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-14T16:22:17.356407+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533175"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity impact because an unauthenticated remote client can crash the host daemon, causing an immediate denial of service across exposed endpoints. The issue specifically threatens deployments utilizing xDS-managed gRPC servers, as requests that omit standard routing authority parameters cause the application to crash on an unhandled slice lookup. Standard gRPC server implementations that do not configure xDS control plane routing are not susceptible to this failure mode. Furthermore, in environments enforcing mutual transport layer security (mTLS), successful transport authentication is required before reaching the vulnerable routing stage, restricting potential exploitation to authenticated peers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84445"
},
{
"category": "external",
"summary": "RHBZ#2533175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
"url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
"url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
"url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/issues/9354",
"url": "https://github.com/grpc/grpc-go/issues/9354"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9365",
"url": "https://github.com/grpc/grpc-go/pull/9365"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9366",
"url": "https://github.com/grpc/grpc-go/pull/9366"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9367",
"url": "https://github.com/grpc/grpc-go/pull/9367"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
}
],
"release_date": "2026-09-14T16:11:41.401000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-09T12:54:47+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.3",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:96293"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
},
{
"cve": "CVE-2026-92615",
"cwe": {
"id": "CWE-413",
"name": "Improper Resource Locking"
},
"discovery_date": "2026-07-01T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2518323"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in flightctl. The configureRepoHTTPSClient() function in the device-render worker builds a per-repository tls.Config (which may include InsecureSkipVerify, a custom CA bundle, or tenant-supplied mTLS client certificates) and installs it into go-git\u0027s process-global client.Protocols map via gitclient.InstallProtocol(\"https\", ...). Because the worker renders devices for multiple organizations concurrently from a shared goroutine pool, whichever tenant\u0027s repository configuration is written last wins for all in-flight git.Clone calls. \nThis race condition can cause one tenant\u0027s TLS settings, including InsecureSkipVerify or mTLS client credentials, to leak into another tenant\u0027s git operations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "flightctl: flightctl: Package-global go-git HTTPS transport mutated per-repo -- cross-tenant TLS-config bleed",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires a multi-tenant deployment where at least two organizations use git-backed configuration providers concurrently. The attacker must be a fleet administrator (able to create Repository resources with custom TLS settings), must control or operate an external git server to receive misdirected credentials, and must win a race condition with the victim\u0027s concurrent git clone. In single-organization deployments, the attacker already holds the same privileges as the victim, so the race provides no meaningful privilege escalation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-92615"
},
{
"category": "external",
"summary": "RHBZ#2518323",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2518323"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-92615",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92615"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92615",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92615"
}
],
"release_date": "2026-09-16T14:34:11.570000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-09T12:54:47+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.3",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:96293"
},
{
"category": "workaround",
"details": "There is no application-level workaround that fully eliminates this race condition without a code change. The following deployment-level measures reduce exposure in multi-tenant environments:\n- Avoid mTLS client certificates for git repositories: If tenant Repository resources do not supply client TLS certificates (httpConfig.tls.clientCertificate), the most sensitive data (client private key material) is absent from the global transport and cannot leak.\n- Avoid skipServerVerification: Do not set httpConfig.skipServerVerification: true on any Repository resource. This prevents a tenant\u0027s InsecureSkipVerify=true from propagating to other tenants\u0027 clones, which would otherwise allow an on-path attacker to serve malicious configuration.",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "flightctl: flightctl: Package-global go-git HTTPS transport mutated per-repo -- cross-tenant TLS-config bleed"
},
{
"cve": "CVE-2026-102278",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-28T21:00:55.949756+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2542700"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service (DoS) by supplying untrusted input containing deeply nested brace patterns. Due to uncontrolled recursion during pattern processing, expanding these nested structures exhausts the call stack and causes the application to crash.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because remote unauthenticated attackers can supply crafted nested expressions to trigger native stack exhaustion and crash server-side processes, resulting in a denial of service without compromising system confidentiality or integrity. In Red Hat environments, the affected library is distributed across containerized web consoles, developer tools, and Node.js runtime environments. Exploitation is constrained to deployments where applications process untrusted, user-defined pattern inputs directly through expansion functions without input depth validation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64"
],
"known_not_affected": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102278"
},
{
"category": "external",
"summary": "RHBZ#2542700",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2542700"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102278",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102278"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102278",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102278"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b",
"url": "https://github.com/juliangruber/brace-expansion/commit/1efee7c397c191da6287a78ec19512476a966a7b"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c",
"url": "https://github.com/juliangruber/brace-expansion/commit/935d78f32f335b2ff76578e5c5e877d31ae9888c"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db",
"url": "https://github.com/juliangruber/brace-expansion/commit/de84f144e9816f30e25fc8179e2e1249ab6df0db"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7",
"url": "https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-qhr7-859c-m2p7"
}
],
"release_date": "2026-09-28T20:57:09.850000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-09T12:54:47+00:00",
"details": "See the following documentation for details on how to enable Red Hat Edge Manager and more: https://docs.redhat.com/en/documentation/red_hat_edge_manager/1.3",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:96293"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:1361a58dcde111c5699a46915c3c710aa77df13cf9566c50aabf6b7ecdaf3814_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alert-exporter-rhel9@sha256:435eb875bebd4f296b5caf3379c6192420f234b41af50fbcc155da23abd1a3a4_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:586d31f5c596682887d480327ef91c287941f1bf189dda19abf9223acba6c698_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9@sha256:83c9d9bcc2f5e0e5c34ef71a06054165ce8f8a324fac164f734970f11a622638_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:a91e3d1b97a6668d185183bd98a2a493032aeb5b4b606f3f4a8c4f90cab096d8_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-api-rhel9@sha256:d26461f7f548fa0bce956c759de5d42386a3974ab5b3d64a4ece591b32d23d0b_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:ac27f28a197cd4262705eb5615b6bd97ea0d2c3a3e155bab34cd3beda75f97de_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-cli-artifacts-rhel9@sha256:eb545386844d17eca7f1436602f63026a192b1ef1b89ab20581859eadce48968_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:49b9d2ea028fba4cb02df2e4170457cf06295ee0109e8067be76d2e92b4eadf0_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-db-setup-rhel9@sha256:c8b403e37b76c82e456866400305ed210c907ccd58c0c3b8f0a8bff461d782a2_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a7876baf32ef52d6bb80551f5a283efa1c6f80464e94e3f33c5a656e8b3a29a_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-api-rhel9@sha256:7a95aca9395708b59f58241c8d0e8d51c0210532b241b0108cf7455f4912fd8d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:7510c8e2d35509123cd06ece28d60c25e05923b14c77c04fcedb16a9b397ae2d_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-imagebuilder-worker-rhel9@sha256:cd052aabab20ee5cfdd871e55c4773f9539ef1adf836fc852c5f01bd6d277b49_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:b24c5a5aa3224fbc6531b5585abc48f4c08b21bfb8571c24f11202741a52497d_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-pam-issuer-rhel9@sha256:d1ce6d401f906884cfe1ab7e8c017612e558d87b61444231b8bdb53f5d7e3e68_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b58f09a9a3328dc04c6a719f0df47978e287b2dad14b5de6f332edb413964143_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-periodic-rhel9@sha256:b787633e02bae025f23ea3438ff9738fec53c4731b25030e3706ce80ec2098c7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:7200f9bd6fda8d43a85f4ca7724200cf32cb0da48334c4bb5d15891a911a0e1e_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-remote-access-rhel9@sha256:dda896cf39eca25e13416844b0cc9f29de293619e3cc4776dbe0fd73dd8f3bde_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:1729e1be9758af9a57c53198f56f41d619ddeee3e420bab442f7d4febcae5557_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-telemetry-gateway-rhel9@sha256:89d4eb1fa99305124db4350e974176ea02945ef1d48a2b9b782286c442e6630f_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:0d7761647c76d7919e685537fb116674e4819933877e9d83efd22504139f1de7_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-ocp-rhel9@sha256:ceba3a0e7105059887920206695695ccca8940c2f6f41a402a6e63df6f835283_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:586083070e8d190b4832fd487f132cb9efd98437cf74d83c3d12c0314bde0cb3_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-ui-rhel9@sha256:9af09c044728203875caa8011087caf51b4e4e37aed932ee93df038a8a3cc199_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:1a9580aeac28f0f49bfd0887749d82900810dc1011899fee9b6ce7516c0d5923_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-userinfo-proxy-rhel9@sha256:26be462ec0cce3d4788e7b93a9b5f4abb9fd9091f287ac8e79e5a62831ba05d3_amd64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:0fbf40d6fb2be45b5674d5a4fad52e4ce9c0e0d9470201b558ae67242d75b0a6_arm64",
"Red Hat Edge Manager 1.3:registry.redhat.io/rhem/flightctl-worker-rhel9@sha256:beeb6b7c3ce819b0df2aee02a3b34bac920a307098d2d8c9d3954d23f97d6d82_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.