RHSA-2026:99823
Vulnerability from csaf_redhat - Published: 2026-11-12 18:48 - Updated: 2026-11-13 15:01Summary
Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.5.4
Severity
Important
Notes
Topic: Logging for Red Hat OpenShift - 6.5.4
Details: Red Hat OpenShift Logging 6.5.4 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrate SA tokens and escalate privileges.
6.8 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products, the same list as for
CVE-2026-10609
Known not affected
30 products, the same list as for
CVE-2026-10609
Threats
Impact
Important
A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Vector. The Logstash source component allocates memory based on a network-declared frame length without enforcing an upper limit. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted frame that declares an excessively large payload size, triggering excessive memory allocation. This issue can cause process termination or an out-of-memory crash, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x | — |
Vendor Fix
fix
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x | — |
Threats
Impact
Important
A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64 | — | ||
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x | — |
Threats
Impact
Important
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard (zstd) compressed stream to an application using the library, resulting in a Denial of Service (DoS). Due to an integer handling error in the decompression logic, the decoder retains stale internal state and performs an out-of-bounds read, triggering an unhandled panic that crashes the application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
30 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64 | — |
Workaround
|
|
| Unresolved product id: Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x | — |
Workaround
|
Threats
Impact
Important
References
57 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Logging for Red Hat OpenShift - 6.5.4",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Logging 6.5.4 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:99823",
"url": "https://access.redhat.com/errata/RHSA-2026:99823"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10609",
"url": "https://access.redhat.com/security/cve/CVE-2026-10609"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-116591",
"url": "https://access.redhat.com/security/cve/CVE-2026-116591"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63209",
"url": "https://access.redhat.com/security/cve/CVE-2026-63209"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-77619",
"url": "https://access.redhat.com/security/cve/CVE-2026-77619"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84445",
"url": "https://access.redhat.com/security/cve/CVE-2026-84445"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99823.json"
}
],
"title": "Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.5.4",
"tracking": {
"current_release_date": "2026-11-13T15:01:01+00:00",
"generator": {
"date": "2026-11-13T15:01:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.6"
}
},
"id": "RHSA-2026:99823",
"initial_release_date": "2026-11-12T18:48:58+00:00",
"revision_history": [
{
"date": "2026-11-12T18:48:58+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-11-12T18:49:05+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-13T15:01:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Logging Subsystem for Red Hat OpenShift 6.5",
"product": {
"name": "Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:logging:6.5::el9"
}
}
}
],
"category": "product_family",
"name": "Logging Subsystem for Red Hat OpenShift"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Ae44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1794255956"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-operator-bundle@sha256%3Ac50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-operator-bundle\u0026tag=1794257436"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1794196321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Aaf8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1794255973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3Ae4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1794197311"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1794243054"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"product_id": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/loki-operator-bundle@sha256%3Afb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/loki-operator-bundle\u0026tag=1794243814"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1794221145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1794232454"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3Ab289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1794205919"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Af17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1794255956"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3Afa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1794196321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1794255973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3Aefeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1794197311"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1794243054"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1794221145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Ac9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1794232454"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3A3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96?arch=arm64\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1794205919"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Ad1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1794255956"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3A9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1794196321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3Aba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1794255973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1794197311"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3Ab0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1794243054"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3Ae3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1794221145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3A0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1794232454"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3Aa1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1794205919"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"product_id": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-logging-rhel9-operator@sha256%3Aa555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator\u0026tag=1794255956"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"product_id": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"product_identification_helper": {
"purl": "pkg:oci/eventrouter-rhel9@sha256%3Aa1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/eventrouter-rhel9\u0026tag=1794196321"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"product_id": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"product_identification_helper": {
"purl": "pkg:oci/log-file-metric-exporter-rhel9@sha256%3A0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9\u0026tag=1794255973"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"product_id": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-loki-rhel9@sha256%3A76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/logging-loki-rhel9\u0026tag=1794197311"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"product_id": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/loki-rhel9-operator@sha256%3A2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/loki-rhel9-operator\u0026tag=1794243054"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"product_id": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lokistack-gateway-rhel9@sha256%3A927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/lokistack-gateway-rhel9\u0026tag=1794221145"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"product_id": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"product_identification_helper": {
"purl": "pkg:oci/opa-openshift-rhel9@sha256%3Afe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/opa-openshift-rhel9\u0026tag=1794232454"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x",
"product": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x",
"product_id": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x",
"product_identification_helper": {
"purl": "pkg:oci/vector-rhel9@sha256%3Ad948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016?arch=s390x\u0026repository_url=registry.redhat.io/openshift-logging/vector-rhel9\u0026tag=1794205919"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64 as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x as a component of Logging Subsystem for Red Hat OpenShift 6.5",
"product_id": "Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
},
"product_reference": "registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x",
"relates_to_product_reference": "Logging Subsystem for Red Hat OpenShift 6.5"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Trung Nguyen (@everping)"
],
"organization": "CyStack"
}
],
"cve": "CVE-2026-10609",
"cwe": {
"id": "CWE-862",
"name": "Missing Authorization"
},
"discovery_date": "2026-05-19T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483943"
}
],
"notes": [
{
"category": "description",
"text": "A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrate SA tokens and escalate privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openshift/cluster-logging-operator: Cluster Logging Operator creates and forwards ServiceAccount tokens without verifying CLF creator authorization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In a typical OpenShift Logging deployment a user managing ClusterLogForwarder objects is also expected to manage secrets with storage credentials. A user with the rights to manage secrets can obtain a token for a SA in the namespace and as such the flaw does not result in any privilege gain or security boundary being broken. The score assigned is reflective of a scenario where secret provisioning and CLF configuration are managed by separate roles.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10609"
},
{
"category": "external",
"summary": "RHBZ#2483943",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483943"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10609",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10609"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10609",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10609"
}
],
"release_date": "2026-06-23T09:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T18:48:58+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99823"
},
{
"category": "workaround",
"details": "Restrict ClusterLogForwarder write access to trusted administrators only. Review existing ClusterRoleBindings and RoleBindings that grant clusterlogforwarders write permission. Apply NetworkPolicy egress restrictions to the collector namespace to prevent collector pods from reaching arbitrary external endpoints. Deploy admission controller policies (OPA/Gatekeeper/Kyverno) to deny CLF resources whose outputs point to non-allowlisted URLs. Monitor for ClusterLogForwarder resources with outputs pointing to external URLs, especially those using token.from: serviceAccount.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openshift/cluster-logging-operator: Cluster Logging Operator creates and forwards ServiceAccount tokens without verifying CLF creator authorization"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T18:48:58+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99823"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-63209",
"cwe": {
"id": "CWE-823",
"name": "Use of Out-of-range Pointer Offset"
},
"discovery_date": "2026-09-29T15:12:15.658458+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543236"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the klauspost/compress package. A remote attacker can exploit this vulnerability by supplying a specially crafted compression dictionary with an excessively large repeat value, triggering an integer overflow. When the dictionary is subsequently processed, this overflow leads to out-of-bounds memory access, crashing the application and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has rated this vulnerability as having an impact of Important because an unauthenticated remote attacker could trigger a denial of service by causing a process crash without requiring elevated permissions. In Red Hat environments where this Go library is embedded, exploitation requires that an application accepts untrusted dictionary structures for S2 compression and subsequently attempts encoding. Although the resulting memory access fault terminates the vulnerable process, the flaw is confined to process crashes and does not compromise data confidentiality or integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63209"
},
{
"category": "external",
"summary": "RHBZ#2543236",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543236"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63209",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63209"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63209"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536",
"url": "https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/releases/tag/v1.18.7",
"url": "https://github.com/klauspost/compress/releases/tag/v1.18.7"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw",
"url": "https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw"
}
],
"release_date": "2026-09-29T14:58:53.366000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T18:48:58+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99823"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing"
},
{
"cve": "CVE-2026-77619",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-22T21:45:39.938827+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2538945"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vector. The Logstash source component allocates memory based on a network-declared frame length without enforcing an upper limit. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted frame that declares an excessively large payload size, triggering excessive memory allocation. This issue can cause process termination or an out-of-memory crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vector: Vector: Denial of Service via unbounded memory allocation in Logstash source",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because an unauthenticated remote attacker can crash the Vector collector process with minimal effort, disrupting log aggregation across multi-tenant environments. Exploitation requires that Vector is configured with the Logstash source enabled and accessible over the network. In OpenShift Logging deployments, Vector instances commonly collect and route cluster logs, meaning that an interruption of this pipeline halts log ingestion and visibility without requiring elevated privileges.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-77619"
},
{
"category": "external",
"summary": "RHBZ#2538945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538945"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-77619",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77619"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77619",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77619"
},
{
"category": "external",
"summary": "https://github.com/vectordotdev/vector/commit/3162ed1a2e5e8d3f210134607518a26aa01e1a37",
"url": "https://github.com/vectordotdev/vector/commit/3162ed1a2e5e8d3f210134607518a26aa01e1a37"
},
{
"category": "external",
"summary": "https://github.com/vectordotdev/vector/pull/25819",
"url": "https://github.com/vectordotdev/vector/pull/25819"
},
{
"category": "external",
"summary": "https://github.com/vectordotdev/vector/releases/tag/v0.57.0",
"url": "https://github.com/vectordotdev/vector/releases/tag/v0.57.0"
},
{
"category": "external",
"summary": "https://github.com/vectordotdev/vector/security/advisories/GHSA-rrfg-9487-mhp6",
"url": "https://github.com/vectordotdev/vector/security/advisories/GHSA-rrfg-9487-mhp6"
}
],
"release_date": "2026-09-22T15:15:45.066000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T18:48:58+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99823"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vector: Vector: Denial of Service via unbounded memory allocation in Logstash source"
},
{
"cve": "CVE-2026-84445",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-14T16:22:17.356407+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2533175"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go. Servers created with xds.NewGRPCServer() can be exploited by a remote client sending a malformed RPC request that lacks the required :authority or Host headers. This can trigger an index-out-of-bounds panic, leading to the termination of the entire server process and a Denial of Service (DoS). In some deployments, this attack can be unauthenticated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity impact because an unauthenticated remote client can crash the host daemon, causing an immediate denial of service across exposed endpoints. The issue specifically threatens deployments utilizing xDS-managed gRPC servers, as requests that omit standard routing authority parameters cause the application to crash on an unhandled slice lookup. Standard gRPC server implementations that do not configure xDS control plane routing are not susceptible to this failure mode. Furthermore, in environments enforcing mutual transport layer security (mTLS), successful transport authentication is required before reaching the vulnerable routing stage, restricting potential exploitation to authenticated peers.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84445"
},
{
"category": "external",
"summary": "RHBZ#2533175",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2533175"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84445",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84445"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84445"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7",
"url": "https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4",
"url": "https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f",
"url": "https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/issues/9354",
"url": "https://github.com/grpc/grpc-go/issues/9354"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9365",
"url": "https://github.com/grpc/grpc-go/pull/9365"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9366",
"url": "https://github.com/grpc/grpc-go/pull/9366"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/pull/9367",
"url": "https://github.com/grpc/grpc-go/pull/9367"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.82.2"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2",
"url": "https://github.com/grpc/grpc-go/releases/tag/v1.83.2"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"
}
],
"release_date": "2026-09-14T16:11:41.401000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T18:48:58+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99823"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests"
},
{
"cve": "CVE-2026-116591",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-10-26T22:34:28.681138+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2561461"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard (zstd) compressed stream to an application using the library, resulting in a Denial of Service (DoS). Due to an integer handling error in the decompression logic, the decoder retains stale internal state and performs an out-of-bounds read, triggering an unhandled panic that crashes the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the klauspost compress library\u0027s Zstandard (zstd) decompression implementation. An integer handling flaw in the FSE normalized count parsing logic allows a remote attacker to supply a specially crafted two-block compressed stream. When processed by vulnerable decode routines, the parser retains stale decode-table state and executes an out-of-bounds read, triggering an unhandled runtime panic. Applications decompressing untrusted inputs will terminate abruptly, causing a denial of service, while container boundaries and non-root execution isolate the impact from the underlying host.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le"
],
"known_not_affected": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-116591"
},
{
"category": "external",
"summary": "RHBZ#2561461",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2561461"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-116591",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-116591"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-116591",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116591"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030a565d",
"url": "https://github.com/klauspost/compress/commit/7f5d8528720c895a6106f201719f87eb030a565d"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/releases/tag/v1.20.2",
"url": "https://github.com/klauspost/compress/releases/tag/v1.20.2"
},
{
"category": "external",
"summary": "https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8",
"url": "https://github.com/klauspost/compress/security/advisories/GHSA-fpmh-frq8-7rj8"
}
],
"release_date": "2026-10-26T21:54:33.109000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-11-12T18:48:58+00:00",
"details": "For OpenShift Container Platform 4.21 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.21/html/release_notes/ocp-4-21-release-notes\n\nFor Red Hat OpenShift Logging 6.5, see the following instructions to apply this update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_logging/6.5",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:99823"
},
{
"category": "workaround",
"details": "Reject or filter untrusted Zstandard-compressed payloads at ingress proxies, or restrict decompression endpoints to authenticated, trusted clients. No direct configuration-level workaround exists within the library itself.\n\n--- CME Mitigation Guidance (2026-11-03) ---\nDisclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from https://cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nThe highest-value action is to enforce bounds on parsed count values and decode-table indices in klauspost/compress zstd decompression routines to prevent integer wraparound and out-of-bounds indexing: upgrade to klauspost/compress 1.20.2+ (or the corresponding fixed Red Hat builds), which reject counts exceeding math.MaxInt16 in readNCount, restrict Huffman-weight FSE tableLog values to 6 in huff0.ReadTable, and adjust count validation in validateNorm, closing crafted two-block zstd compressed stream. Until patched, this is a concern on applications decompressing untrusted Zstandard (zstd) input using klauspost/compress DecodeAll or streaming decoder, so reject or filter untrusted Zstandard-compressed payloads at ingress proxies, or restrict decompression endpoints to authenticated, trusted clients. These controls limit blast radius and contain exploitation, but they do not fix the underlying integer wraparound defect \u2014 apply the upstream patch to fully remediate.\n\nHighest-impact CME: CME-1311 Input Size and Quantity Bounds Enforcement (high)",
"product_ids": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-operator-bundle@sha256:c50261a219eec8110a941f518e28fc172e0053e1919980a390cc4240b4ec0d21_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:a555ab2b367e0d74475daf698e7b300ae468d4153f376c3a9d67e8ec469b5c66_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:d1f312770975f0b3124c237909b70d1c067cfa24dab1a410fbb96c2cd4e03867_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:e44f24dc90a4896eee0804a6e5fd3a872de4ffe48f8cc635f788baefd7ec549e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator@sha256:f17841755dddee8ef96e29a849bda7e56ff9090fa79680c6fe60b2c04c447ff8_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:6b739864dbacb757d403de7fd6d4cd62e7fd02bdffef866ea29d319954e1678c_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:9c905ea343dbdba6f031f127f49256f9c383107c52ce47139906ce49a800e088_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:a1fb121a467976ee19c44f12377b8b7ec6bde3955a039d09f03c36d9a81d34d8_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/eventrouter-rhel9@sha256:fa1daab9f470701490668ff1be57fa25bf8b61db5b52b223f0f9795e36f31142_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:0fed7958c7538403dc0c1999df6ae79b0041499dac626bc4221362ea6f528912_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:4f7e0a23e076f956a067142f05dc4359b85d0f86483a24edf2e13eac6b68c347_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:af8e97cad46310d35ed2ee7176d7b8b93f47d15c1f2c74f780dcdb5cd8d59d0e_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/log-file-metric-exporter-rhel9@sha256:ba8842d3775d1b05d6a53249d871dd69df92c5425803160d47b5c0b6b7808364_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:0994384e9a93a6bb92c0bae29352b821d4313b48c2e7bf3fcd884a152a5cd3ac_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:76c9a40c12e6f4c370b0a6c711559a0485f34dd20a1d3d929b074d3608ae3255_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:e4c4b6fd73e7459ec692e9ca5eca049ef2299ce07919e054102bfe9ded3fc923_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/logging-loki-rhel9@sha256:efeec65cad8ea35938742570129e31ab117ea42d3a3968be90b02dba6fd34e09_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-operator-bundle@sha256:fb3b71b4fbb6ecc4d0c7bc551a683adcbeb0199869044a54284cd9b6e52d084d_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:224cd9cbe26643564ffd9d24b631ab2deb209af3feae38f3f39b0c0a4bb3e6c0_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:2e047923f0cd5c024cbe05f67a74c1e1a6b7806717b56cd02d0e31ac622fecd7_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:5e2d7ddd726fdec6186069cc787eb132437e1f960e5e2c5cf210f9893f529680_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/loki-rhel9-operator@sha256:b0e1256bdfe5d9fc75d715348b058ac9f618a34e02f764ed24fd4a6cb4236fa6_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:4d1c5254aa1b534996b29fb45ff980d418ebf66af14dd99048d5c3adde45dd15_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:927364ca20c319d91835387e16aeb463a23e1914976511d4c5648aea180ad7ed_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:996e04fce4e16178d2455da92f56bd21128a5c0db626f5681a7aa4df26f2ae08_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/lokistack-gateway-rhel9@sha256:e3a006bb1818529435347df4af81c054525865ac9bf672138feac53226578bd0_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:0de7dd825b001e5cb82c6cf67e49d8b88fd5d546ff884a0b6a7fd1f1a06c8b34_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:9ea6125f4450aa9546c525de7409d33bd53b33772a7f3e0466ce54ad4db182d9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:c9647afc1de20003bfcdc8fdb0b004215473f70af967437a08abed85269d8928_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/opa-openshift-rhel9@sha256:fe3e9c96b3b0edf8adf019574aa2454c48181c4e631b9380613f8d37247c5345_s390x",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:3352e2ca9040f255c07f6107b4f1595ab12647606b42b9fd991c0b24e1548f96_arm64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:a1470a2bcd32df1ea5063009b4bc02656727b6dc6f35173ddb6fadc463ccbfe9_ppc64le",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:b289999f52fc13893b928df8b1974140f50716320bc27747966e4870053661e9_amd64",
"Logging Subsystem for Red Hat OpenShift 6.5:registry.redhat.io/openshift-logging/vector-rhel9@sha256:d948d20254033bafd993a367538270ea283801f9ce809d3d101c4b2e72f71016_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
How durations are calculated
Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.
Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.